Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfa038bb-df84-39f1-a80e-a23dd3261009.roa
File: dfa038bb-df84-39f1-a80e-a23dd3261009.roa (raw, json)
Hash identifier: JDc4vr9nNhERirfo0E/ra0Wi+JetlOBnHom8Buh6uXU=
Subject key identifier: 6F:79:53:9F:85:C6:BF:90:7E:F2:25:6C:32:F1:10:84:EE:B8:C2:CA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840117E4CE71144046F199B5500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfa038bb-df84-39f1-a80e-a23dd3261009.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 98.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:11:7e:4c:e7:11:44:04:6f:19:9b:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=898c27ab-e4ce-48f2-af9b-422b408bad66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:f3:00:a5:f2:1c:98:d0:f9:1c:52:71:db:
61:43:52:ca:f2:42:86:58:bf:c1:8c:79:8a:50:63:
ed:cb:2f:20:95:67:03:3a:1f:c0:de:45:7d:40:27:
3e:50:b2:e2:f3:3b:46:30:af:c7:7d:6f:3f:cd:96:
17:9e:a3:ba:f9:ca:a0:05:60:da:06:06:5b:76:35:
ed:54:45:3f:c6:40:a6:79:74:2d:48:c0:9e:a6:75:
83:16:56:02:af:21:a3:d0:60:49:d0:bf:98:3e:44:
a5:39:0a:f2:06:b3:81:31:af:52:46:4a:ab:7a:59:
ad:b6:40:fd:1d:26:ab:b5:bd:73:bd:9f:2b:81:b8:
68:a6:18:37:75:fc:00:0d:bf:3d:1c:4a:90:0d:13:
9f:94:f7:d6:fc:41:40:15:bf:ed:05:48:c6:09:dd:
30:73:12:b6:1c:5b:68:a5:53:c3:f9:a7:97:57:d0:
30:00:e6:f2:08:bd:f8:58:4c:50:59:ba:e5:56:01:
fb:5f:7d:b3:e1:23:98:8c:f2:3c:76:94:87:3d:27:
7e:25:b5:9a:36:e9:e1:1d:6b:04:2a:43:41:a7:14:
c9:dd:c8:79:3a:a7:4c:cf:ea:e4:2f:d9:1c:62:44:
6f:88:55:54:a9:ee:57:2d:04:ad:4a:67:dc:68:65:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:79:53:9F:85:C6:BF:90:7E:F2:25:6C:32:F1:10:84:EE:B8:C2:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfa038bb-df84-39f1-a80e-a23dd3261009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:31:e1:20:2d:00:70:5a:47:03:48:cb:c9:ac:68:80:61:49:
e3:83:9a:9b:79:fe:38:75:1a:bb:b6:c3:21:a9:d8:cb:d7:82:
d5:eb:85:3d:8a:78:b7:92:ad:34:30:5f:be:51:66:98:81:e7:
2b:c3:b4:87:51:4e:1d:ab:cf:18:ff:73:fd:03:ba:48:40:1b:
f4:1f:af:04:b1:51:f7:50:90:c0:cf:ce:c1:ae:cb:c7:71:e8:
25:8e:2d:e3:ae:1a:52:30:a1:bd:c3:2a:ed:75:c7:da:c4:b3:
c1:4d:ae:dc:4b:d0:6c:de:3e:8d:2b:6e:be:a4:84:ea:35:99:
da:fd:dc:61:e1:21:17:3e:c6:c1:58:36:90:cf:a4:9e:57:31:
4d:94:3d:6f:86:59:64:00:b2:4e:ab:d7:fa:b0:5f:6c:dd:63:
bd:13:a7:a5:9c:e7:3b:29:b7:b4:bc:ce:57:d0:db:e4:1d:65:
cf:2c:64:14:7f:07:fa:2f:ad:52:76:f5:39:32:36:96:43:a7:
29:d4:74:09:4f:07:30:0f:ef:9a:2b:a0:d2:7f:43:d3:21:82:
97:50:35:5c:3b:07:85:52:c6:2d:e9:19:48:0a:a5:f2:dd:e7:
a0:4f:dd:f8:9c:91:76:97:7f:a7:e8:13:0d:ff:cd:27:83:c9:
ab:10:95:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:40 2025 by rpki-client