Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dff1cbf9-dac3-3dcd-af44-7339d41f1276.roa
File: dff1cbf9-dac3-3dcd-af44-7339d41f1276.roa (raw, json)
Hash identifier: hbB7WDbpKlfgZw/dNaa8e9avXcQ/PPl1OLPO0E6BnNA=
Subject key identifier: 46:13:AB:FE:7A:95:0F:19:07:46:91:C1:C4:E3:05:10:35:A6:09:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406E6F958612685AD781047780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dff1cbf9-dac3-3dcd-af44-7339d41f1276.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.87.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6e:6f:95:86:12:68:5a:d7:81:04:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=e3d90f23-8b62-44da-ba77-a6900dcecd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:13:dd:15:c7:91:b8:2b:74:a2:36:ae:0b:
18:42:12:67:94:d9:09:9e:5f:8a:9f:3d:ad:73:67:
92:59:30:5d:30:c1:5c:08:b4:1e:a7:5b:10:7f:72:
6c:b1:ac:21:75:47:13:71:35:5a:83:af:15:0e:b8:
2e:b0:f8:a7:2b:99:cd:1a:ba:90:6a:03:1e:fb:1e:
0b:47:d6:5f:e9:93:ec:cb:d3:8e:82:27:3f:4e:15:
0f:f9:7e:68:85:ce:f6:9e:2e:59:c1:e0:1c:fd:d9:
7c:f3:08:41:66:51:6b:33:df:4d:73:3f:9d:dc:28:
e2:a8:9a:29:65:70:58:f4:aa:9a:54:6b:60:a2:e4:
48:99:08:f4:1f:d4:9a:12:08:91:ac:ae:ab:51:f2:
7e:98:a8:06:bd:7d:8e:af:4e:45:67:ab:0e:dd:75:
89:a2:79:9b:77:e1:47:ce:6d:92:2a:ae:2e:3b:bf:
c1:60:3c:f9:c7:5a:17:4e:c1:eb:a2:7b:5d:55:7f:
6b:0d:a9:17:7f:55:3e:0b:4a:53:39:18:ed:44:85:
42:d2:6d:0d:85:f1:f9:13:a8:59:ec:d9:38:0f:fe:
79:e8:51:e9:f6:af:f5:f4:09:d8:94:11:10:8c:92:
61:51:cd:33:0f:45:ab:18:ac:eb:32:1f:40:99:b9:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:AB:FE:7A:95:0F:19:07:46:91:C1:C4:E3:05:10:35:A6:09:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dff1cbf9-dac3-3dcd-af44-7339d41f1276.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:6e:19:eb:0e:30:c2:b3:39:0c:86:7a:ea:10:de:63:37:ce:
91:e8:05:ac:d2:00:26:74:36:55:ce:fc:1e:75:8a:8a:70:d0:
81:80:7a:9b:e8:a1:8e:b3:12:64:48:9e:f4:98:2c:9c:ab:de:
be:2c:df:be:18:a3:0f:50:35:88:37:9a:dd:fe:2c:a2:b8:98:
0d:57:2b:0e:32:d1:b3:82:27:31:6b:6d:84:95:5f:59:b1:92:
7c:a2:97:cc:59:d2:e3:64:aa:d4:c8:94:3e:4f:2e:b5:e9:7e:
e3:9f:73:0e:e8:93:49:68:96:0a:c5:04:0a:c6:80:d1:65:5c:
12:d9:56:4e:59:a3:f1:f9:1a:b5:a4:ab:d1:f6:b8:c1:86:c0:
ca:7e:63:04:91:a9:07:af:07:d8:ce:a1:bf:e3:8c:6a:45:30:
c2:e9:9d:bc:34:d9:ea:bb:b1:61:15:97:d4:5b:de:54:ac:89:
b0:e2:94:8c:17:e2:ac:93:79:bc:7c:cf:4e:4c:cd:8b:f5:c1:
1e:71:ff:ed:5e:38:72:a7:73:c7:76:cd:85:7d:84:42:f3:0e:
7f:f5:f3:e7:e5:63:5c:8d:0b:56:90:a6:41:40:b6:06:cf:42:
33:d3:2f:48:db:86:a7:90:0e:f9:1d:4d:6a:97:3e:13:56:27:
9d:b8:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:47 2025 by rpki-client