Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5c0741f-7fe4-3c47-87cb-21e28300b2cd.roa
File: c5c0741f-7fe4-3c47-87cb-21e28300b2cd.roa (raw, json)
Hash identifier: QkIKUl9EoQeiYxAroWFEvwMBoXXRZ9GxmI8pMFttV7c=
Subject key identifier: 9C:33:0B:A9:73:F9:1C:C2:D7:EB:0C:9C:BA:5E:5F:37:3A:FD:F9:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A3CAB4BBAA815B0C13C9500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5c0741f-7fe4-3c47-87cb-21e28300b2cd.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.150.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:3c:ab:4b:ba:a8:15:b0:c1:3c:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=4473216e-0ef1-4c7b-b9ae-eb50d3b74eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:32:b4:92:77:9f:2e:cc:3f:23:1a:41:3b:
ad:8a:72:b8:37:e5:e0:52:e9:72:13:6b:05:fa:5f:
77:ac:3a:99:72:cb:f3:23:ca:5a:17:5e:ac:ee:a0:
af:e1:6a:b5:a1:99:a0:c2:d6:58:36:09:4c:b0:b1:
c9:16:cf:ea:a2:5d:22:a2:d1:83:bd:13:78:d4:26:
76:4b:b0:38:09:66:ff:66:91:79:0c:76:55:d4:14:
72:f4:42:7e:1c:ed:af:1b:10:67:86:54:9e:cf:4e:
b0:d1:5f:09:75:a9:fc:d6:0f:61:1d:8d:b8:db:b8:
d9:8e:50:e4:aa:fa:21:56:2d:ed:5c:1b:a5:2f:b3:
fc:68:bc:4d:66:d1:c8:4d:82:59:81:a3:5f:18:ff:
d1:6e:ba:86:48:78:70:98:da:84:df:fc:0a:72:1d:
a4:19:af:80:3e:ed:18:82:b5:1d:94:f5:29:e4:72:
59:04:75:d0:66:1d:f9:11:c0:7e:aa:2e:b2:d7:4c:
4c:91:92:b3:25:31:f3:75:69:fc:59:51:32:61:d5:
ae:e2:c8:e0:1f:b7:95:dd:00:5f:72:5b:8c:e2:b0:
97:98:b5:9c:cb:29:cd:88:25:10:8f:55:53:e8:22:
f3:fc:43:46:db:7f:f0:0e:28:bc:db:8e:29:fa:e3:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:33:0B:A9:73:F9:1C:C2:D7:EB:0C:9C:BA:5E:5F:37:3A:FD:F9:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5c0741f-7fe4-3c47-87cb-21e28300b2cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.150.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:4e:1c:92:41:ec:0f:d0:72:69:ab:2f:80:b3:c7:d8:50:b8:
7d:ad:50:2d:02:06:95:80:5d:8a:59:5e:3d:08:c2:46:ce:a8:
1a:03:dc:01:83:5b:59:cf:f3:d1:49:b9:7a:9e:d8:db:b0:5a:
fe:47:da:0f:78:fc:d0:9d:9f:07:86:19:5c:27:81:ab:00:e0:
4f:e1:ab:7a:f3:b8:07:78:4f:d2:4f:b7:d9:d8:f0:bf:b1:6b:
0f:a7:82:4a:20:25:f1:4f:40:ec:67:1b:56:55:c7:f7:39:de:
a8:fb:0f:18:86:aa:b1:67:89:21:be:aa:8f:e8:31:63:60:f8:
c6:18:49:f8:ab:97:18:12:22:34:86:7a:3c:a6:ba:d2:53:cf:
e5:d3:eb:62:fa:c0:62:d9:b8:db:12:a9:0a:e0:1b:a1:c3:3d:
21:f4:bd:3b:2d:70:a4:ae:a2:76:c1:f8:7f:09:fa:54:6a:48:
1a:0f:98:33:ef:a3:d4:ca:17:38:21:e0:9a:77:c0:fd:09:bc:
8b:b8:d8:de:20:8f:1f:84:7d:95:c1:84:1a:75:81:8a:8c:5b:
4e:cb:b4:15:03:f9:e1:85:10:f3:28:a8:38:5c:aa:b7:2e:fd:
a6:85:18:7d:86:4d:db:d9:60:df:bb:a1:57:dc:52:c1:b9:b2:
13:b2:8e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:17 2025 by rpki-client