Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee0c60af-32ba-34a1-b53f-3dc515111508.roa
File: ee0c60af-32ba-34a1-b53f-3dc515111508.roa (raw, json)
Hash identifier: Lkj99h0T1sfI30PrEf+skOyOk2PS26ShuUwGo/vYic0=
Subject key identifier: CF:28:EC:46:1B:5E:70:BD:FF:4E:F1:72:44:A6:08:C0:78:67:FF:D7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408F08CFB2FACB0FB9D777B600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee0c60af-32ba-34a1-b53f-3dc515111508.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 99.10.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:08:cf:b2:fa:cb:0f:b9:d7:77:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=160d7b39-3117-43e2-bef8-2cd01393fa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:3c:ea:3c:0e:01:a8:0b:4e:41:48:60:ae:
0f:ce:66:83:8c:3a:5c:9b:bd:45:c6:7d:62:fa:b5:
2c:14:98:d8:5e:9a:15:ec:7f:5b:e2:30:76:0a:de:
87:0e:6b:c4:c0:18:66:bd:c2:5b:05:24:f7:f9:6d:
db:e7:5f:f2:98:f8:56:2b:c5:53:33:0d:5e:6a:db:
e2:eb:ae:74:2a:77:a7:31:72:79:cc:88:f0:f2:c6:
ee:e9:9b:d3:05:3b:32:5a:71:c6:48:08:b3:4c:29:
41:53:68:34:c2:3c:01:db:75:05:9d:76:01:78:d8:
60:ae:d1:34:75:cf:5c:8f:ba:4f:72:41:76:09:4f:
d5:69:83:30:f0:c9:81:2b:d3:10:a2:65:af:9c:63:
39:fa:aa:c1:60:af:c8:6a:ae:71:95:9f:b2:6a:57:
5f:5d:03:c1:23:0b:ed:2e:78:2d:ec:ed:25:ab:a4:
21:e0:fe:a4:00:c9:e5:cc:15:8f:1e:c6:fe:2b:c0:
29:f1:b4:40:e9:9e:56:45:4c:eb:c0:ea:fb:97:68:
27:8b:df:ba:14:61:21:1e:68:66:93:f1:1d:12:c5:
d8:47:c6:de:56:c3:a9:61:e2:93:67:37:f5:ec:13:
6a:6d:4f:5d:29:53:f6:d1:c7:8b:a7:a5:d8:71:a6:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:EC:46:1B:5E:70:BD:FF:4E:F1:72:44:A6:08:C0:78:67:FF:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee0c60af-32ba-34a1-b53f-3dc515111508.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.10.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:6b:df:4f:c0:36:da:f6:dc:ab:5f:30:78:89:28:0d:6a:fe:
cd:16:dc:93:fd:3c:8b:6d:18:41:35:a0:cd:e1:4a:b2:81:db:
98:7f:d8:5a:4a:5e:bc:a3:4b:cd:56:9e:d1:75:34:63:1e:08:
48:ce:be:d7:fd:0d:bb:5b:66:55:ca:f5:cd:77:b0:1d:1b:60:
48:8f:78:0f:8a:d0:61:7e:4b:67:3f:eb:ae:a0:7a:18:28:23:
59:e7:f9:b8:b5:73:2c:c3:90:ea:a2:2b:4e:1c:4b:84:c7:2b:
6e:39:2c:bf:48:4a:bd:ca:0e:52:51:29:21:2d:2e:d9:4d:6b:
c7:73:52:c5:93:c4:11:51:ad:ad:fe:b1:01:98:4b:94:7d:04:
5c:44:df:6f:8c:1d:3e:e5:c5:dc:7f:0e:87:62:23:d6:b2:79:
9a:5c:d3:11:e5:1c:72:4d:06:f1:35:5d:35:74:1f:9d:4c:ea:
14:b1:fa:23:f7:17:e7:ff:f0:90:22:88:29:9d:e5:3f:b9:e1:
98:b4:15:99:3a:3b:3c:4b:8e:8a:93:a3:86:2b:35:63:85:d8:
a1:b3:c9:b6:eb:ce:f6:d6:f2:fb:4d:74:8b:5b:42:92:04:75:
41:a1:f6:28:d9:be:a1:3a:79:d9:d4:29:02:1e:1b:be:a2:47:
20:ef:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:52 2025 by rpki-client