Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9a82253-f1eb-3490-8486-ab80bd044515.roa
File: d9a82253-f1eb-3490-8486-ab80bd044515.roa (raw, json)
Hash identifier: 9lMkgbOjCWhjYXufmJvesNVOPOSHtV/2REL0uTIpYnw=
Subject key identifier: 96:54:B2:16:D8:7E:B0:D7:43:5A:AC:46:73:81:43:3D:42:45:11:43
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBD9429EEC636BA414594B680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9a82253-f1eb-3490-8486-ab80bd044515.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:94:29:ee:c6:36:ba:41:45:94:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=9954541a-b92b-4181-b6bd-a0c1a200ccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:7d:f2:28:76:23:dd:3b:38:20:ef:70:cc:
d8:e7:e3:e7:e8:88:84:53:e1:06:c0:2b:78:cb:b1:
44:a4:04:44:0a:ea:96:a8:0c:08:74:76:7c:bd:69:
3e:37:2a:ad:d2:31:20:28:e4:42:87:4f:bd:aa:c5:
77:29:52:44:3e:8e:6a:ea:19:a5:af:66:5e:9c:c5:
4d:7c:62:33:d4:d2:8d:8f:d2:8e:21:2e:dc:07:1b:
37:4e:8d:84:b1:75:ee:d3:5c:73:93:a1:28:15:48:
3d:b8:f0:45:85:49:ac:36:ad:a6:c2:75:60:93:c3:
43:c6:02:17:c7:ad:51:5e:4c:bc:c3:9e:1d:ec:b9:
29:da:7f:09:77:34:a3:73:57:37:41:05:e2:d3:8e:
ea:0c:50:94:f8:04:f5:02:6e:b0:89:18:2a:6a:c5:
c7:ca:9d:72:28:05:3d:76:86:20:2c:8e:bd:d1:85:
82:75:ac:65:d9:0d:27:0d:0d:5c:f5:3f:02:ae:f4:
70:8e:9f:03:87:84:fd:91:df:c4:9c:f0:4f:9e:10:
df:da:1a:43:a8:c2:51:35:3d:29:00:e1:45:a9:ee:
f5:69:51:86:e7:00:7d:0c:a8:4c:fc:18:3f:4f:15:
1f:6d:e8:ba:79:84:76:2f:a6:7f:50:8e:e5:6d:f7:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:B2:16:D8:7E:B0:D7:43:5A:AC:46:73:81:43:3D:42:45:11:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9a82253-f1eb-3490-8486-ab80bd044515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:8d:52:8c:a6:3e:d7:70:5f:a0:c9:51:a6:20:c7:95:5e:d6:
f6:08:3f:d2:ee:99:22:41:69:b3:00:8e:b4:47:4a:8b:9e:95:
f2:36:86:43:5c:21:d7:15:bd:11:99:d7:46:68:3a:7b:f8:42:
10:a7:4f:2d:e5:94:5d:6b:4e:a5:b5:18:7b:22:ed:92:62:b2:
56:b9:72:d7:01:f4:5d:f9:48:10:1b:a2:58:89:e6:53:ed:93:
73:4e:51:91:59:4d:10:77:9b:da:97:e4:56:df:9a:2c:66:1a:
47:7c:f0:48:21:01:a5:1b:60:95:ca:b6:9e:d7:94:20:18:38:
c0:84:c4:f8:1c:2b:34:3b:62:40:30:b4:62:57:67:77:b1:2b:
cd:60:cc:cf:ed:0b:57:b0:e6:2b:fa:65:01:13:7c:04:e8:ba:
0c:6d:df:2c:3d:75:08:3e:8c:f8:0a:bd:dc:ad:4c:e4:fd:30:
02:77:cf:d7:4a:52:b2:d0:e7:51:15:71:30:3f:51:dc:02:db:
5b:9c:39:62:75:2c:f1:a1:0f:16:28:3b:84:74:40:32:82:b7:
43:36:e0:62:50:1f:01:c7:da:f3:b2:39:d9:87:cb:2d:8c:7f:
9a:55:a3:b0:ba:5f:a4:f9:9c:c9:76:a6:d1:1e:16:63:ef:93:
40:2b:30:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:35 2025 by rpki-client