Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2ba84dd-7ec9-385e-b711-d3e1c4c5f064.roa
File: d2ba84dd-7ec9-385e-b711-d3e1c4c5f064.roa (raw, json)
Hash identifier: 9Gxh5oMSeSa7gt2LYNDa2e/4RLyvqjZ3DNOJmEqVvfQ=
Subject key identifier: 8C:75:CF:26:C1:E0:3D:94:3F:9A:E9:61:E1:8A:7E:0D:47:94:F4:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A44CD5CB8544CABE2E37800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2ba84dd-7ec9-385e-b711-d3e1c4c5f064.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:44:cd:5c:b8:54:4c:ab:e2:e3:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=e4460873-910d-4ece-954e-fdefc1bcd961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:25:7b:0f:54:d2:fd:11:e7:8c:2c:da:e9:
68:be:64:f8:bc:c6:ab:07:bc:b3:9d:94:ca:b7:78:
b1:16:b0:90:9a:74:1c:6a:a2:08:76:58:cc:e2:0b:
52:d7:fb:ba:ac:b5:be:f9:81:13:31:c9:f1:28:e6:
17:c1:eb:e0:8a:fd:cb:1d:54:8f:de:eb:91:15:6c:
ac:4c:8f:7c:c2:ef:53:88:ef:dd:bf:4d:a0:13:04:
20:5f:75:d9:2a:83:e2:74:40:34:91:fe:dd:0a:af:
94:f7:3b:9b:5f:f0:d6:96:0d:d4:e7:63:4a:a4:29:
2f:be:d7:c6:d0:a4:ba:3b:1e:17:2c:ea:78:67:ba:
7f:4e:7a:ec:85:fa:3c:3f:4a:89:5b:6d:1c:09:34:
0b:e9:5b:5c:fd:27:24:d2:10:ba:33:ca:ec:6c:ec:
cd:6a:fe:5d:d5:d6:1d:ec:f4:3a:bd:e3:53:a7:9e:
6a:5e:d7:32:5f:8a:68:86:40:d9:37:df:48:2f:93:
33:19:c7:de:79:3c:f6:6a:4f:98:f4:a9:be:7b:2c:
e9:2d:7a:ca:2b:1c:c7:b3:e7:df:44:08:55:85:0f:
1b:06:7d:02:3a:49:9c:10:2f:6b:53:7c:48:bf:65:
26:fc:f8:54:92:66:29:60:94:0a:7f:b9:bb:54:99:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:75:CF:26:C1:E0:3D:94:3F:9A:E9:61:E1:8A:7E:0D:47:94:F4:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2ba84dd-7ec9-385e-b711-d3e1c4c5f064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:c7:00:fe:66:e9:d0:c8:34:44:e5:f9:a1:fd:12:d2:93:77:
2f:4b:e8:50:1e:13:51:87:7f:c6:2d:70:44:37:71:c8:1d:c0:
b9:82:c6:6e:6d:54:eb:49:38:18:1b:b4:4f:1b:02:0f:d9:76:
c1:13:d6:31:d1:63:d6:a0:33:e3:83:4d:fb:1d:22:3c:f6:b9:
70:29:d7:84:80:33:4f:2b:21:ef:58:1c:5c:c7:5a:b6:15:2b:
92:57:95:f3:59:7d:42:70:e6:cf:6a:d7:95:8c:48:2f:b0:80:
4a:53:b3:16:48:95:9e:59:d1:d3:ef:93:52:33:35:ec:f5:36:
89:4d:74:0a:d9:f8:f1:d8:5e:eb:7a:a7:82:b1:36:6b:56:25:
87:96:8e:9d:88:35:28:45:61:dd:d4:f6:5e:77:79:ff:65:64:
af:08:d9:95:de:93:8b:a2:eb:4d:e5:e6:88:cb:48:58:eb:88:
91:f6:c6:01:70:c9:05:12:03:9c:d2:17:d6:34:47:94:02:33:
3a:20:26:1d:a4:5b:9d:6c:cf:18:1f:4d:49:5e:8f:21:4d:1c:
f8:fc:96:32:86:29:b3:c6:9d:7a:01:a5:ca:c9:60:58:3d:1d:
a7:9b:b7:ef:54:9e:a2:95:e8:2d:ce:d0:04:65:76:80:18:cf:
7a:7a:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:27 2025 by rpki-client