Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d332b238-1369-305c-b26f-3118c3758c04.roa
File: d332b238-1369-305c-b26f-3118c3758c04.roa (raw, json)
Hash identifier: NzLU5GB9SoeZxj3/c98PP5bZWTGbNuPvO9t5if/RUHo=
Subject key identifier: 5B:8E:60:44:71:0F:57:91:41:16:38:D9:F7:C7:73:57:AC:82:1A:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B072D18BA365476B94080600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d332b238-1369-305c-b26f-3118c3758c04.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 131.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:72:d1:8b:a3:65:47:6b:94:08:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=c378daf0-f6b5-491b-9eef-7c125f06a82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:48:59:fc:7a:49:9d:d0:0c:67:bd:d9:07:
b6:16:8a:a9:70:99:55:0c:2a:eb:d8:46:3c:16:e8:
c8:b6:aa:79:b2:0f:e6:a6:23:50:06:da:4c:2f:85:
63:27:d4:ae:6f:97:7b:e3:2b:86:12:f0:b4:b3:b0:
b3:fd:a5:01:fd:41:7d:7a:86:10:0c:90:55:6b:5b:
42:bd:f5:b8:60:ed:60:25:34:fd:66:68:a1:36:05:
6e:15:7c:28:3c:ca:e4:16:b6:2e:f4:03:b0:29:ea:
c3:58:59:81:47:ac:c1:5a:4a:5e:c1:5c:9b:fb:b2:
ff:bc:4b:7b:d7:41:2a:e4:eb:de:13:f6:26:6c:7b:
10:5b:6f:a7:e9:ce:df:3a:10:14:cd:b7:e1:d5:da:
f0:6e:36:e0:45:51:76:53:c6:24:72:0a:8c:3e:b5:
0c:0a:6a:17:5e:ed:e9:a4:a8:78:1f:b4:07:a9:16:
e2:af:4d:83:7c:de:ae:51:b1:f7:0c:1d:21:62:db:
11:7d:fc:e7:df:d4:d9:94:40:b8:d0:70:1f:56:45:
19:80:43:57:93:82:65:a1:f2:bc:8a:6b:48:07:56:
ce:86:3b:ed:be:f3:59:03:5b:a5:21:a5:a7:8e:3f:
b3:f2:2a:3c:20:2b:73:2c:76:6c:bf:9c:d9:07:3f:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8E:60:44:71:0F:57:91:41:16:38:D9:F7:C7:73:57:AC:82:1A:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d332b238-1369-305c-b26f-3118c3758c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
131.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:81:3d:a0:f2:b1:b2:3a:50:81:8c:eb:0c:b6:2f:f1:c9:a3:
eb:e0:1d:33:1b:ab:b2:5c:c5:01:1f:c2:85:5c:25:f6:eb:b2:
72:21:df:60:da:19:90:57:10:2c:07:67:94:1a:6b:23:8f:09:
6e:e8:18:56:37:d2:66:9f:2a:c2:48:42:5b:4a:dc:18:f3:35:
55:b6:68:1b:71:0f:ab:1e:2b:3e:da:a5:b4:0f:ad:f3:26:45:
3c:20:1e:df:09:8e:75:c2:b6:84:d6:44:2c:d4:d5:51:ba:68:
95:6b:c1:04:eb:44:93:cd:57:fb:02:d9:3f:82:72:27:ea:82:
72:4a:5c:92:9b:46:d1:ab:2f:5e:5c:e6:58:f4:4c:c3:81:23:
fb:3d:4d:58:36:17:ba:c8:a3:07:79:25:ce:6c:84:26:b4:25:
33:ce:bc:04:10:a2:74:cb:7f:f2:d3:fc:f1:b1:a3:63:7c:e1:
6c:61:e1:ed:fc:55:ee:2f:54:c7:a8:90:93:16:af:60:16:c4:
7a:cc:a7:77:4a:af:4c:36:ac:81:e1:7f:f5:b2:cb:2e:29:46:
66:8a:bd:b8:b4:05:1b:96:01:f5:8b:a9:1f:60:53:36:ee:17:
6c:d2:68:0e:85:7c:b1:82:5e:e9:bc:5b:ad:9e:88:e8:3b:a0:
5c:46:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:43 2025 by rpki-client