Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8f9d53f-187c-3912-b672-2fa33783f0a2.roa
File: d8f9d53f-187c-3912-b672-2fa33783f0a2.roa (raw, json)
Hash identifier: yCXHzVtAcK2CO2H2wKzts3wrgDR0xRRBX48M2zOebe0=
Subject key identifier: AA:CF:53:BF:3B:6C:BF:3B:B5:E6:5B:2E:70:4A:0C:A8:9D:3C:08:9F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409FD7DAC7AFFCFF30C93EC200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8f9d53f-187c-3912-b672-2fa33783f0a2.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 128.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9f:d7:da:c7:af:fc:ff:30:c9:3e:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=06af709c-ac39-4b2c-b12b-aac80de54dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:10:6e:99:52:2c:78:37:04:d7:51:c2:2c:
8f:cc:fd:b1:84:98:af:fd:34:fe:ca:2c:95:1f:66:
53:ee:54:9a:ff:74:7a:26:72:a2:9e:cf:fc:90:3b:
9d:5a:10:be:ba:e7:73:5f:b7:4f:f3:c7:cd:51:c0:
bd:42:0a:96:c1:cc:8e:04:7d:fd:e9:0e:11:f2:1c:
52:a8:4c:35:4f:f9:6c:dd:e8:6f:7a:43:ba:a2:ca:
74:0d:c7:c3:36:db:fc:8a:d1:df:7c:70:66:f2:24:
30:15:d9:e0:bb:a6:46:cf:e7:bc:1e:06:51:2d:c7:
33:b9:b8:50:e5:7d:ba:85:19:a8:b2:c0:2a:bd:00:
f5:78:83:25:90:30:47:f3:c2:bf:d7:2a:ef:d6:2e:
a3:de:3b:27:e0:98:42:d1:f3:10:0f:a3:85:eb:26:
cf:a9:ea:07:d1:bc:46:a9:0e:00:00:0b:16:b4:93:
c7:da:f6:2f:08:e4:6f:ac:69:ee:86:0f:36:65:28:
ba:66:84:db:6f:f7:d7:65:92:92:1c:c8:88:6d:c1:
f1:7a:02:56:4d:37:64:74:e0:e8:34:81:55:53:7e:
c2:ae:7a:a6:c3:0d:ed:97:a3:69:78:a5:8c:d0:e3:
b1:bf:c9:52:0a:7e:85:66:d7:a4:6f:a4:5c:23:a8:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CF:53:BF:3B:6C:BF:3B:B5:E6:5B:2E:70:4A:0C:A8:9D:3C:08:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8f9d53f-187c-3912-b672-2fa33783f0a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e3:13:bc:d2:88:cf:b6:92:e1:1d:41:69:0a:ed:69:1d:06:
bb:0e:71:84:7d:5b:32:e1:8f:e7:d1:bd:2c:19:5c:62:a7:f6:
fc:d7:fb:a6:78:7d:0a:a3:16:a4:f5:a6:49:e6:04:e1:fe:d6:
0d:37:d8:40:81:9d:ca:32:3b:a3:74:ec:87:76:d4:2e:cc:62:
c3:fb:6d:65:a0:1f:49:e6:53:1f:35:c1:73:c1:d2:00:5e:08:
0d:0e:e7:79:3e:54:ec:06:d1:8f:a1:33:b9:bf:7e:c4:57:4b:
6f:84:88:fd:dc:ea:c4:8e:49:6e:29:0a:20:05:90:02:92:c0:
66:77:f9:cc:50:4d:cb:ac:62:05:0d:c6:5b:75:32:17:94:98:
e0:6b:0f:f6:42:f4:98:4a:aa:de:a0:ca:c9:14:af:d0:16:32:
4f:1a:20:0f:2e:5d:c3:4e:6f:d5:2e:cb:ee:91:2d:4f:96:4b:
31:73:57:f2:4b:89:41:76:4f:99:eb:9b:9f:39:50:93:cd:0c:
dd:9f:d5:6e:ba:97:b4:c3:7c:6c:d8:0c:01:16:3d:c8:47:d0:
dc:75:7b:33:d9:f4:6e:8e:01:aa:58:b4:49:9a:a5:af:0c:9b:
38:35:23:96:ee:ff:8a:c4:c9:27:32:0c:e3:e7:a5:06:9a:1d:
dc:c6:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:13 2025 by rpki-client