Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e871feed-27c7-3f99-bc5a-cb6ee29dc833.roa
File: e871feed-27c7-3f99-bc5a-cb6ee29dc833.roa (raw, json)
Hash identifier: Lt1X5krO/6UbzTJTqeTuCSDqG4W12qT/u6TLPr0FFow=
Subject key identifier: 84:3D:0D:6A:04:86:45:9F:60:83:CB:6D:18:4B:E8:C4:9F:A9:7C:4B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F31A1B57FF5413B648A52DD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e871feed-27c7-3f99-bc5a-cb6ee29dc833.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:31:a1:b5:7f:f5:41:3b:64:8a:52:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=71e8bf96-8bd2-47b4-8ff0-f7dd613c5b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:68:18:2f:a2:7a:1d:be:7b:a4:72:9e:ba:
a9:9b:f7:fb:7a:69:fa:65:36:bc:f1:d6:2a:4f:f2:
34:ae:3c:b1:1c:be:0b:a1:0e:28:61:a1:80:ec:aa:
de:9f:82:05:b0:86:2a:7b:52:39:12:22:7e:d3:01:
06:02:7a:ff:1b:b0:0a:b6:b7:2e:95:38:9b:8a:86:
44:cc:a4:7f:ac:89:ca:38:4f:8d:d7:50:55:e5:5d:
e3:dd:b5:b4:c6:65:d2:ab:e8:17:07:d4:9e:50:4f:
1f:62:26:aa:7c:14:be:d3:a8:08:83:12:0d:c0:d1:
8b:8d:2b:3e:df:01:f6:e1:2a:bf:21:8a:2d:44:7e:
4f:e0:37:f4:88:34:92:2f:5e:96:84:da:be:75:35:
c5:ca:f7:0f:95:63:fa:a5:62:4e:e7:e3:79:42:ca:
e5:de:13:eb:80:3c:ef:ef:ec:82:3f:08:54:96:39:
02:93:41:7b:24:f8:72:b5:52:0d:dc:08:b5:61:31:
72:91:1d:a6:b2:07:4a:20:b2:56:10:60:fc:92:68:
fd:4a:5f:fc:8a:c4:d2:57:04:97:b2:f9:8c:69:30:
b2:30:38:03:27:66:73:6d:89:0b:7e:7b:47:db:35:
cc:5b:21:ac:86:a1:c0:57:39:b8:51:3a:74:51:52:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3D:0D:6A:04:86:45:9F:60:83:CB:6D:18:4B:E8:C4:9F:A9:7C:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e871feed-27c7-3f99-bc5a-cb6ee29dc833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:49:62:96:eb:c0:97:96:a1:4e:2d:b9:dc:54:aa:ec:c0:79:
b9:aa:35:fd:98:ed:07:8e:ff:74:dc:a4:7a:ce:c5:31:03:3e:
af:59:02:6c:c9:4f:52:4c:20:49:07:66:2d:aa:33:9e:4f:8a:
42:37:55:f2:60:1d:f6:7b:38:63:4c:df:aa:a0:d3:3f:0a:77:
7a:ab:4a:cb:40:ba:06:3a:ea:05:7d:78:e4:22:f9:c6:0e:5e:
2f:64:4d:63:73:cd:b2:ee:cf:4b:9b:2e:d2:13:a4:ac:60:ba:
20:42:d1:22:55:4a:45:c2:d1:38:59:14:cd:57:e4:a7:ae:27:
f6:ba:92:f3:c1:b1:96:6d:3f:43:57:a9:32:44:79:24:04:6d:
f5:e5:df:76:7e:37:6c:e0:60:20:f9:95:6c:d7:7f:f0:00:cf:
74:38:bc:7b:7d:40:1d:92:2d:01:f9:53:87:be:94:c3:2d:8d:
06:05:4f:ad:2f:f3:56:ad:66:41:3c:04:b9:14:44:62:a3:b5:
f5:a7:17:54:7c:f3:61:2e:52:9f:13:84:21:d3:3c:a5:bc:44:
21:cf:30:3d:b1:33:9d:4c:b1:36:bc:fb:6c:d9:85:20:a8:2b:
65:70:82:e4:9c:bc:5d:a5:53:98:16:e1:f6:51:36:51:e9:8d:
1c:53:c5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:37 2025 by rpki-client