Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5c11b65-86d8-3588-b747-c02cfaf3ecd2.roa
File: d5c11b65-86d8-3588-b747-c02cfaf3ecd2.roa (raw, json)
Hash identifier: lN+Rt8phIoyVTKMzUfKdoMKJm7QExlDfLn+Kt3lAXuY=
Subject key identifier: 89:6A:28:30:73:CC:BA:4D:11:87:CF:4A:9B:A3:8D:54:4A:A6:A1:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D437CBE886D8883538EBC040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5c11b65-86d8-3588-b747-c02cfaf3ecd2.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 16509
IP address blocks: 129.30.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d4:37:cb:e8:86:d8:88:35:38:eb:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=7050cba4-0453-4581-b681-5425f9901389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:07:0c:3e:b5:f0:9b:18:0d:53:f1:9e:f7:
36:f6:6a:f0:43:b0:a0:62:18:7e:ff:79:38:c6:c7:
29:8d:8a:3a:de:90:13:b2:77:4f:20:b4:0b:91:5a:
ea:85:4a:79:cf:34:3b:44:fe:63:df:47:47:67:8b:
7d:29:7c:a1:39:8e:21:82:18:b5:95:01:ba:54:65:
a2:65:6c:9b:b2:99:94:6f:e1:ef:06:0b:48:31:70:
18:23:6e:83:4b:51:84:5c:30:66:e6:72:00:29:e7:
58:87:b7:3d:22:5c:2a:9f:72:a1:ee:dd:00:14:be:
c5:78:81:40:0c:1e:1e:4c:0a:83:e0:21:b5:16:2c:
a1:fa:f6:00:9e:ad:c7:4e:c2:2a:7c:f4:12:50:4a:
61:1d:87:38:8f:63:e3:ea:9b:28:40:d5:7c:b2:f7:
8c:3d:d0:5f:f1:05:87:93:e8:f9:3b:32:c2:a2:84:
8b:9b:d6:b6:f1:60:87:e1:d5:d1:68:01:9d:9e:32:
1b:e3:93:ae:f6:3d:d9:2f:1d:8a:88:91:4b:9c:ca:
fe:2d:b8:82:06:79:72:2a:d8:0c:db:db:90:54:94:
c6:06:32:31:be:ed:1c:ec:d6:f7:97:51:06:84:d6:
07:6e:d5:19:46:95:67:42:05:51:2a:0a:ba:f8:17:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6A:28:30:73:CC:BA:4D:11:87:CF:4A:9B:A3:8D:54:4A:A6:A1:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5c11b65-86d8-3588-b747-c02cfaf3ecd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:59:97:7a:0d:42:9b:0e:74:77:ca:93:e9:e1:a4:fe:5f:51:
5d:3a:b2:d7:95:76:7e:35:d1:b9:9c:62:20:6a:cb:5a:51:15:
cf:86:cf:f7:3f:fa:8d:da:6a:e1:85:37:bb:86:53:4d:50:75:
a5:4b:68:06:30:92:1a:2e:6e:f9:8f:6d:e2:f5:c5:b9:ad:92:
94:c3:74:70:ef:e7:a1:4c:94:57:53:36:4a:21:7d:b4:77:9e:
0a:bf:20:15:7b:33:f6:16:fa:c0:71:5f:f4:f8:81:af:b7:c4:
16:9d:21:60:8d:2b:b9:30:52:ec:77:ac:c7:15:40:c6:7f:6c:
fd:0d:f0:6e:06:e5:99:20:5c:da:34:ef:78:65:23:96:1d:0e:
65:a8:dd:d8:34:fd:7c:67:e4:d7:d3:40:4b:9b:fa:19:bb:2f:
5f:dd:ee:96:d5:44:91:29:2d:d8:a9:8c:1b:16:cf:54:06:52:
7a:e2:ad:fe:99:fc:2c:5b:1f:b4:30:95:a0:49:65:7a:e2:f3:
bb:32:80:d1:20:c7:b8:22:2f:2c:21:d5:55:8b:3e:3c:31:20:
25:13:29:7a:5c:14:17:87:d2:a0:4a:dd:d7:ba:c6:43:10:1e:
88:18:7a:20:55:ae:54:8c:62:08:2a:3d:28:91:37:71:e6:6d:
33:89:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:30 2025 by rpki-client