Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e66e3e32-77ca-3033-850a-34f164a7ee44.roa
File: e66e3e32-77ca-3033-850a-34f164a7ee44.roa (raw, json)
Hash identifier: OT0xeb1huwmi97sKwCT99Crvgss/5hvmlr6s3I58VKA=
Subject key identifier: B5:42:71:F3:2A:52:16:1D:D7:63:DA:2D:41:99:BD:D6:37:7F:A1:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D709F4634234C808EDBCC800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e66e3e32-77ca-3033-850a-34f164a7ee44.roa
Signing time: Tue 07 Feb 2023 12:00:00 +0000
ROA not before: Tue 07 Feb 2023 12:00:00 +0000
ROA not after: Wed 15 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 129.235.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d7:09:f4:63:42:34:c8:08:ed:bc:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 7 12:00:00 2023 GMT
Not After : Mar 15 04:00:00 2023 GMT
Subject: CN=6b171578-a251-488a-bbc9-96eace0240bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:b4:36:dd:ba:24:44:32:31:3e:b4:d3:48:
ae:f4:17:fb:d0:38:14:fe:45:26:84:cf:e8:da:6b:
b2:0e:d3:4e:5f:c4:91:47:3f:32:54:ca:1f:78:34:
80:76:ae:a3:d0:5a:5a:e0:ff:1b:46:22:67:b1:09:
9e:29:30:2a:88:a5:87:6f:2b:1f:1a:9a:6f:fd:f1:
b9:6c:9d:20:de:f4:16:a7:fb:23:4d:2d:42:f2:44:
a5:03:11:49:c8:72:7a:55:51:0c:ca:de:1c:99:a8:
46:18:11:35:99:ed:f0:08:cc:f1:67:53:c0:33:0c:
69:47:cb:51:a9:22:02:f2:f0:24:23:26:55:0b:68:
0a:5a:c1:f3:fe:8b:7e:0c:02:d0:b4:7d:d6:9c:3b:
2b:91:f2:0c:11:58:9e:4f:35:5c:b2:b5:29:48:ac:
f3:76:14:d0:14:82:8f:f8:82:6b:9e:e6:27:83:ed:
5d:b6:53:df:24:d5:db:b0:b3:bd:ae:43:48:bf:40:
f7:09:d3:e8:6a:fc:9d:61:68:27:a6:db:0d:cb:43:
48:b6:87:41:d1:a2:2f:90:eb:86:94:75:35:01:5d:
39:44:24:e2:ae:11:2b:ee:ce:c5:69:37:05:0f:a1:
24:13:99:13:a4:fc:82:3c:ee:f2:e3:a2:e1:c1:69:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:42:71:F3:2A:52:16:1D:D7:63:DA:2D:41:99:BD:D6:37:7F:A1:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e66e3e32-77ca-3033-850a-34f164a7ee44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.235.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:a7:23:2e:86:37:f4:29:3a:73:c2:fe:bb:f9:1b:9e:8f:97:
4b:63:4a:ca:4c:bf:8f:ca:1b:ed:43:25:b4:ff:ec:61:76:03:
3f:34:8b:73:f0:37:df:04:18:3e:e1:0f:59:86:ff:f0:86:ce:
0f:e9:ad:26:8b:71:cb:74:cd:47:ec:ed:16:d1:40:ab:92:6d:
73:2b:a1:7d:86:bd:f7:2e:4b:5e:30:f6:01:18:1d:f3:09:ff:
3d:f6:a3:f5:55:1d:0e:2f:25:b5:8e:5a:90:ac:d1:0f:8e:3a:
4d:b1:05:38:1a:bd:fd:51:1e:f1:6c:cf:80:10:0a:61:2f:a3:
85:8e:56:21:d4:c2:19:05:ca:59:8d:40:25:73:2f:8f:6e:c5:
c9:e3:67:ab:86:9b:97:25:c9:8d:9c:d1:b7:1e:b3:08:92:e7:
62:9d:4a:f0:80:cd:12:ce:a2:38:fa:c1:a3:4a:cb:37:e7:38:
14:90:72:0a:70:6d:c4:94:f7:ff:42:44:51:d9:eb:3a:e8:85:
a3:ea:2a:ef:5c:a2:fb:82:31:3d:9b:13:3e:00:5b:4c:6d:7b:
93:65:ee:48:89:cf:ed:12:07:4c:f6:6c:04:b9:50:fe:4f:ca:
36:f7:5d:5e:4d:43:89:5c:6c:7e:64:86:82:29:f2:9b:ef:0c:
89:43:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:47 2025 by rpki-client