Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dff2c9d9-a3a0-38af-b20e-9eefe42d9045.roa
File: dff2c9d9-a3a0-38af-b20e-9eefe42d9045.roa (raw, json)
Hash identifier: GyUUjORR/0QTbjGTMNfKPrH1tpyz8D9sUSI7hnFDEQ8=
Subject key identifier: 84:A0:18:CC:B1:ED:D1:16:17:2F:B6:53:21:77:51:9B:38:B1:3A:7A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404C262B731A9AEE010A9B8180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dff2c9d9-a3a0-38af-b20e-9eefe42d9045.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 198.13.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4c:26:2b:73:1a:9a:ee:01:0a:9b:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=c95a799c-be78-423f-b8f1-5f1941a04bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:3c:d2:a4:64:95:4d:d8:98:78:90:d3:dd:
67:b3:2a:95:b0:cb:fb:bd:bd:7f:3e:37:20:fb:e3:
be:9d:5c:38:41:4c:7d:cf:a3:58:bd:37:51:ba:79:
7a:2f:e9:84:08:bf:06:ac:9f:88:50:b9:06:65:5f:
19:4e:2e:02:b0:15:4d:ba:8a:5b:83:ef:13:6a:e4:
d6:25:13:02:ef:5e:13:b0:39:57:56:34:e4:4c:ed:
f6:d3:09:a1:b3:d0:a6:85:de:89:03:96:34:1b:d4:
b8:b9:c1:fe:7f:77:8b:49:46:25:67:d7:fa:b6:dd:
88:a0:76:d4:b3:1e:cd:bb:ac:aa:ba:00:62:07:36:
4b:28:7e:02:25:f5:bf:83:83:9f:99:fc:10:07:c9:
68:64:2b:75:57:2c:39:75:a3:e1:ba:d8:9b:24:54:
89:a4:00:6c:96:8a:1b:19:57:54:29:d9:6c:d6:33:
0b:fa:57:1b:92:d1:5e:c0:c6:2d:79:58:87:03:f4:
dd:c4:c9:fa:90:de:95:48:ac:c4:d8:63:db:85:f6:
75:a0:62:e7:fa:45:6c:af:61:7b:bc:dc:48:3b:7c:
01:1b:e6:fd:cf:e8:28:85:42:5f:ab:64:b4:1f:7c:
3b:9e:a0:7c:c9:c0:e7:60:b0:95:c5:c2:27:7c:ce:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A0:18:CC:B1:ED:D1:16:17:2F:B6:53:21:77:51:9B:38:B1:3A:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dff2c9d9-a3a0-38af-b20e-9eefe42d9045.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:f0:de:ec:4c:cc:59:7a:26:0a:8e:5e:52:a6:3d:57:76:46:
73:9e:47:29:ba:74:31:50:20:54:34:10:53:24:0c:1d:60:f0:
89:12:be:74:29:24:16:f6:d0:e6:02:c1:5c:95:a7:9d:71:94:
5a:ca:2f:ae:18:70:55:54:79:b6:7c:6f:d5:44:a4:78:29:b7:
97:bd:0b:5b:44:9e:a2:45:31:6d:ea:01:8d:13:8b:ba:08:9f:
59:2a:ba:78:b3:83:f2:c8:98:8c:ba:41:a7:b0:4a:05:7a:f5:
72:fa:37:a3:89:9b:9e:d6:18:a0:1e:7a:ee:1f:f0:12:c8:1d:
fc:32:5e:fb:2c:15:45:74:8a:98:92:2c:5d:d7:e3:4b:7d:4a:
84:46:52:45:be:81:8a:66:a5:9b:73:5a:fa:45:56:9f:b2:fe:
b7:86:ab:52:cd:b6:47:ff:3e:16:c1:ba:e2:9d:30:c8:5b:b6:
5c:58:0b:04:fe:30:b7:a3:95:67:92:33:ce:15:ef:ed:93:08:
0d:35:0d:b3:87:27:67:d1:c6:18:54:d7:a8:d5:57:b8:1c:c7:
71:3e:5b:8c:a4:49:34:bf:69:c8:4e:14:57:d9:63:18:6e:41:
2f:60:02:a5:3e:d6:98:1a:19:41:e2:e2:d7:4c:af:3f:90:ed:
cf:d9:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:10 2025 by rpki-client