Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6ce50f4-5131-32c2-b26b-4a95e6664f1d.roa
File: c6ce50f4-5131-32c2-b26b-4a95e6664f1d.roa (raw, json)
Hash identifier: V/lkVyFPdf0tGAI7h8/eP5JMMKZRU5psXV7sPhX0Jf0=
Subject key identifier: 1B:4B:E8:39:E5:96:9D:2D:39:65:3A:C3:12:09:DB:BE:63:53:B9:74
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3327B0CF2151BCA9AD47DA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6ce50f4-5131-32c2-b26b-4a95e6664f1d.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:27:b0:cf:21:51:bc:a9:ad:47:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=7a76679a-ff82-4521-8a55-2ef595ae4ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:a6:6b:bc:e8:7a:8d:14:67:47:2d:f8:ef:
f4:37:c6:4e:41:48:3e:9b:8a:fb:35:da:c7:6f:96:
85:15:cf:da:cc:c1:51:dd:bc:61:ee:2e:38:79:99:
f3:27:16:a8:cb:c9:65:e4:9b:fa:5a:0c:5b:2b:aa:
9c:58:d2:7d:47:42:ac:4e:2a:dd:af:56:5b:ca:8d:
c1:c6:be:fb:a4:fc:45:75:ef:38:72:21:c3:5f:a0:
98:8e:fd:b6:9b:08:ba:02:24:8a:74:60:4f:fd:74:
30:a1:a5:f1:49:5e:d7:14:b2:5d:4a:29:86:cc:ae:
a8:27:73:ad:90:1c:68:fb:85:f2:9a:8d:6f:07:49:
a2:76:fb:69:ac:9f:5d:2e:55:8d:d8:a8:c9:dd:9e:
a4:15:f0:51:68:d2:f5:6f:a0:4a:b6:5e:c8:22:f5:
25:19:12:f6:94:4d:68:36:77:93:44:de:b5:04:17:
28:ed:ce:4e:77:1b:73:43:8a:2e:ff:15:17:e0:1a:
1e:0c:44:64:06:0e:c6:99:71:2f:ef:1f:f5:23:2a:
c2:89:aa:26:86:1c:47:95:74:c8:04:d1:28:cb:45:
56:d7:64:28:25:64:99:20:b4:be:72:95:e0:ed:20:
d5:b2:ed:3e:19:dc:bc:ce:43:ed:dc:c9:ec:73:b0:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:E8:39:E5:96:9D:2D:39:65:3A:C3:12:09:DB:BE:63:53:B9:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6ce50f4-5131-32c2-b26b-4a95e6664f1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:48:29:f6:ae:0b:75:52:f6:1b:4e:42:ac:58:05:3d:e9:d0:
7b:e9:80:4b:69:0c:50:75:1c:36:ff:74:66:91:13:1b:20:87:
31:0e:b9:0a:fe:5a:2a:e7:b2:c6:b4:23:b9:44:03:76:a0:af:
3d:cc:d0:f6:05:ee:36:2b:76:ef:87:f8:4d:f3:cd:73:0b:e7:
29:9b:cf:e4:2d:c8:9b:8f:3b:f5:61:ae:7c:cc:04:ea:02:d8:
3e:b2:fd:e7:d5:20:b8:6d:80:6a:e1:44:a2:86:52:bd:17:c7:
39:1b:07:6f:7e:30:7f:80:0a:e4:96:40:9c:a2:68:76:16:24:
e5:0f:a5:a1:24:fe:ee:66:c8:cd:c7:f8:e3:56:7a:d1:ea:d8:
8b:e3:10:b0:39:d0:7e:ea:c6:ba:7d:c6:c0:ba:87:38:73:81:
27:a0:79:fb:43:3f:1d:3f:81:dd:38:3d:d4:0c:63:b2:f4:d0:
04:d9:25:5d:4f:9a:db:73:38:d4:41:2c:e6:9c:d7:84:4a:c2:
62:5e:ba:c6:d0:3e:b7:e7:af:0b:5a:71:b1:fa:18:d0:de:31:
25:41:a2:e9:44:6b:45:8c:43:dc:9b:f6:5f:8a:49:e1:0a:fb:
fa:b1:45:d5:fd:be:66:13:9c:57:b5:ef:bd:86:a2:20:00:ce:
d4:8b:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:43 2025 by rpki-client