Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c10a2541-a9c5-3c67-b321-688effa1faa2.roa
File: c10a2541-a9c5-3c67-b321-688effa1faa2.roa (raw, json)
Hash identifier: M+Yrn5MNjOS/IMjaJfxV7lDP+Xw7PrzBP3lTJ8Pk88c=
Subject key identifier: 15:DE:7C:5C:A9:FE:94:B8:C1:43:51:EB:3F:5E:4F:A8:AB:3F:3F:55
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584096CCB78E7A6CB7A83D6CD940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c10a2541-a9c5-3c67-b321-688effa1faa2.roa
Signing time: Sun 15 Jan 2023 12:00:00 +0000
ROA not before: Sun 15 Jan 2023 12:00:00 +0000
ROA not after: Mon 20 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 130.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:96:cc:b7:8e:7a:6c:b7:a8:3d:6c:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 15 12:00:00 2023 GMT
Not After : Feb 20 05:00:00 2023 GMT
Subject: CN=a1858562-aa27-47d1-8b5a-b58e9b70ab10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:b4:d3:87:e4:79:6f:01:2f:83:29:b9:9d:
ce:9f:5f:28:8c:82:34:64:41:7b:12:48:c5:9a:c8:
78:e6:db:85:3d:35:ed:2d:e7:e9:12:06:89:ac:f9:
d8:da:34:34:6a:0e:39:7e:d3:63:75:8a:e4:8d:cb:
de:e4:9e:dc:7f:17:36:9d:5b:d4:9f:e3:56:5c:4c:
1a:f7:3b:b7:a5:67:e3:9c:d7:2c:fb:69:db:13:d7:
7e:7d:9a:ee:6a:ac:9c:de:bb:f1:72:ee:61:09:31:
d3:1d:5a:d4:e2:76:dc:5f:0c:ed:c4:ff:7c:9a:1a:
e5:d9:a3:af:41:ea:6a:00:01:85:a6:7b:55:4e:f6:
35:67:ba:86:0b:db:3d:a4:76:63:3e:e3:e4:be:77:
bf:5e:29:9f:de:7c:ce:2c:b8:7a:ec:bb:d1:27:72:
95:fb:21:be:a9:a5:e3:dd:44:6a:e3:4d:58:2b:32:
9f:22:19:13:49:31:a6:9d:58:6a:54:5d:d5:2c:0b:
38:f2:fb:fd:34:02:a7:94:3c:6c:a1:b7:f6:98:03:
eb:6e:8e:24:3c:d3:1a:5a:9e:4c:e3:72:74:2f:06:
c7:77:55:ac:af:a6:9b:1a:93:ed:40:2b:4e:cd:c9:
a1:70:68:84:40:c4:c6:7e:c6:f0:51:14:4f:27:34:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:7C:5C:A9:FE:94:B8:C1:43:51:EB:3F:5E:4F:A8:AB:3F:3F:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c10a2541-a9c5-3c67-b321-688effa1faa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:0d:af:53:a4:70:13:ab:04:15:68:8b:36:ae:fd:a2:fe:3e:
49:f5:03:52:c6:37:29:55:e7:bb:55:85:2d:f2:af:b8:a2:c6:
31:ad:b5:16:83:30:26:cb:38:5b:c9:fc:a3:ed:02:37:0a:21:
e3:ae:b6:9e:a0:7b:8e:e1:04:24:26:cb:2a:c3:59:e9:b5:0c:
76:cc:fe:be:65:ea:9d:7d:44:78:54:df:a7:d3:5a:f0:77:6b:
87:de:f8:01:cb:b9:38:56:1c:2c:10:e3:be:5b:16:b2:ae:1b:
b8:74:1d:82:27:5c:16:9e:e9:75:c0:ca:b2:98:bf:bd:1d:46:
b7:14:5d:0a:59:11:ae:24:8b:2e:98:ae:43:c4:e2:67:76:bd:
57:20:9d:07:5d:db:5b:7f:45:cb:4e:1b:22:38:6a:50:c5:b9:
c8:fb:cb:4e:7e:c8:c7:49:5d:1a:5b:4d:cb:e5:95:50:cc:bc:
33:20:f1:11:82:66:17:3b:da:b8:11:c3:b9:d6:ab:47:8b:1f:
12:f7:84:fd:84:41:8a:91:fd:90:f9:15:94:13:21:23:fe:d5:
85:8b:dd:6c:a6:b4:e6:61:73:22:0c:35:f4:df:50:ec:8e:dd:
10:44:e8:11:62:13:cf:84:49:7e:7e:66:8d:78:ad:67:6e:49:
f2:74:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:04 2025 by rpki-client