Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce872c00-0c04-34d5-9ac1-74d6d0a3b554.roa
File: ce872c00-0c04-34d5-9ac1-74d6d0a3b554.roa (raw, json)
Hash identifier: BOBlDld6bdP38KMU7jLrNlGaxOM5sS2F/F6OmZdwvk0=
Subject key identifier: 11:A4:AD:39:7A:7F:D2:C8:B2:DC:55:E3:8E:79:30:5E:75:1A:82:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D815966C28473AF2690AD1C60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce872c00-0c04-34d5-9ac1-74d6d0a3b554.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:59:66:c2:84:73:af:26:90:ad:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=ccb96b0c-3c8a-4469-9f1d-6ea9441978e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:12:91:ce:6a:46:cf:d3:c6:f2:cb:17:0a:
0c:91:88:e4:95:a6:4a:ec:11:92:23:89:de:eb:26:
91:7e:0e:e2:0c:fb:b9:d1:50:df:96:ab:b6:63:fd:
73:c9:9e:c4:e9:00:55:30:39:c7:71:ff:f7:c7:7b:
3b:e3:d0:bd:66:74:f0:02:69:57:e2:87:7b:58:2b:
fd:13:83:c9:04:a9:3e:60:6c:9f:20:aa:20:90:24:
f5:8d:71:a0:5e:59:5f:27:1b:46:57:3c:80:cd:cf:
d1:66:a6:49:31:4d:b7:3f:be:e2:5f:07:6d:21:58:
f0:51:69:f6:a7:6d:66:72:4c:a4:19:a1:b0:5b:99:
53:53:a3:40:24:bb:50:3a:e3:3d:b7:42:6c:5d:d2:
51:84:8e:71:3e:9b:22:a8:4d:68:4f:30:64:b8:48:
f6:e9:4e:7c:9e:57:fe:f6:ee:34:9d:ba:e2:d0:52:
7b:83:0e:10:a2:f4:4d:c0:9b:ad:b1:23:a5:40:b0:
f4:9a:d6:3c:f3:7b:f5:2d:5a:49:3e:70:40:ce:dd:
31:93:2c:56:6e:7c:00:3c:55:13:10:32:41:cf:b2:
09:49:9f:71:7f:d8:b9:d5:30:1d:dd:c6:17:14:9e:
59:b0:60:bc:25:03:a9:9d:24:95:fe:bd:c3:de:d8:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:AD:39:7A:7F:D2:C8:B2:DC:55:E3:8E:79:30:5E:75:1A:82:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce872c00-0c04-34d5-9ac1-74d6d0a3b554.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:12:c1:fa:a7:0d:4e:4c:a0:6d:fb:cc:41:f1:61:e7:fd:23:
33:aa:99:e9:34:da:51:e3:3f:0d:85:27:90:58:23:d4:84:c2:
f3:b7:2a:07:2b:50:95:42:4f:fd:11:7a:c9:71:9a:e7:34:b2:
44:40:99:68:10:8a:bd:ae:05:03:cb:e2:30:0e:00:da:d2:65:
90:47:15:00:b0:76:58:8a:c7:99:62:85:c2:8f:91:61:06:2d:
b4:0e:de:1c:6c:c5:29:a1:f5:3f:bb:da:66:f1:63:0c:48:92:
3f:c6:59:90:72:ad:a2:4e:7f:eb:1f:2f:ee:4f:d7:6d:c6:3d:
cd:21:59:a0:9a:82:50:01:e2:06:c4:e6:86:25:57:a2:bd:71:
e7:c1:30:d5:cd:7d:10:a0:05:72:d7:03:e2:8b:f0:47:c8:c1:
e0:49:ea:a9:54:15:cb:a5:a5:0f:ab:04:f2:e3:48:83:62:ff:
fb:96:4e:9e:e0:f7:f9:d5:cc:65:58:2d:83:14:4b:83:e1:6c:
00:8e:b2:5e:ef:8c:9a:3d:68:6c:43:c5:5e:52:47:c5:9e:bf:
60:e8:33:4b:df:8b:98:39:98:26:81:b7:17:3a:ff:4f:a8:4a:
56:2a:f0:fe:8e:c8:c0:a4:99:8e:18:ec:03:9a:69:4a:6b:e1:
b0:c9:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:29 2025 by rpki-client