Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4cd0604-d09d-378c-a9e1-b558339f7b79.roa
File: d4cd0604-d09d-378c-a9e1-b558339f7b79.roa (raw, json)
Hash identifier: WKdVLfX4nURWEshYCFvXUgC62CzqsUXpGQrsyBlwFNo=
Subject key identifier: B9:AD:12:1E:7D:8D:EF:0C:A3:6D:1F:7D:EF:21:F6:DC:6D:50:AC:C9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D331F4043E06D8DB60C249480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4cd0604-d09d-378c-a9e1-b558339f7b79.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.141.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:1f:40:43:e0:6d:8d:b6:0c:24:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=c43b01cc-9d93-4a74-b638-50956ee85491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:d2:79:0d:ad:a3:65:1b:52:81:83:c4:59:
03:af:7d:ad:28:25:87:33:19:2e:1e:b1:c6:96:84:
10:e7:bb:e9:73:2a:cc:6e:85:29:d2:8a:80:d4:ba:
e9:2b:5a:fa:69:92:0a:e0:b4:cd:3d:94:19:88:c4:
46:46:44:2e:15:43:ac:ea:de:40:7e:21:62:8a:4a:
1d:0c:4f:30:e7:03:b9:68:09:77:88:46:9a:ae:f5:
9c:2f:52:50:28:cd:15:e3:23:2f:69:98:72:a6:7c:
f5:a4:24:be:ac:5b:85:cd:a7:be:bd:90:39:8c:36:
37:66:f5:45:e3:4b:05:94:e5:63:28:93:ac:b9:52:
28:08:e9:03:b2:dc:95:54:cf:e6:ed:15:e7:0f:e9:
61:4f:0a:48:51:90:84:27:df:1a:2b:d9:e0:11:14:
93:a0:a1:94:88:b6:7b:ba:17:57:b1:ae:18:94:91:
73:b3:66:2d:29:88:31:03:14:e7:dd:43:af:67:28:
96:e8:2c:5b:f5:0d:5a:0d:38:23:65:00:ea:04:a3:
1e:5a:fc:a7:2a:42:c4:ad:f0:ff:9e:03:f8:fe:f3:
83:16:a7:2e:c0:6e:bb:12:52:f0:a6:d6:2d:f6:d5:
ed:76:4c:78:d6:c7:9b:ea:7a:20:fb:ec:59:23:4e:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AD:12:1E:7D:8D:EF:0C:A3:6D:1F:7D:EF:21:F6:DC:6D:50:AC:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4cd0604-d09d-378c-a9e1-b558339f7b79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.141.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:1c:0e:54:ff:77:ec:ed:2e:9f:9a:7f:b2:2d:ee:f5:7e:51:
73:02:0c:a2:70:2d:c9:84:81:23:bc:fb:48:d6:19:1e:16:f6:
e4:1e:74:3f:c2:43:90:20:77:e8:5e:aa:ac:d5:7a:65:69:12:
c5:4e:e5:fc:1c:82:84:d8:30:88:dc:a4:16:cf:22:e9:d8:d2:
7e:09:b4:f8:15:9e:cc:66:73:56:f5:40:c8:37:ed:0d:a3:ab:
ae:3b:c4:f2:98:bf:76:2a:5f:c9:b4:93:99:11:78:f3:30:1e:
3b:06:a3:10:09:c7:e3:22:8f:4d:69:06:12:56:ff:5b:4b:60:
fa:a4:f5:d1:52:b1:d8:f4:89:59:cd:bd:e2:e0:15:20:82:b5:
92:bf:4d:8f:83:66:10:64:6e:be:a7:81:96:47:eb:f4:2d:11:
f0:d5:1b:d9:35:8a:57:fe:37:0a:7c:61:b9:c1:4a:0e:0d:1a:
fd:4b:a2:d8:fc:f9:02:a8:43:c1:cb:c9:99:0d:87:d1:fe:e0:
c9:53:bb:35:3c:fb:e4:fc:1d:27:8a:8a:78:ac:26:1d:57:9e:
32:91:a0:f5:cd:14:7b:77:dd:16:8b:18:85:e6:88:59:51:d5:
ca:3b:51:39:2d:29:37:59:ba:82:ad:c2:eb:66:1d:9a:7c:51:
11:9d:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:03 2025 by rpki-client