Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f0688875-661c-3588-8aa7-cca6f690ea2a.roa
File: f0688875-661c-3588-8aa7-cca6f690ea2a.roa (raw, json)
Hash identifier: FX3SetVkEfGWTp8yP/yKSnaiBujii+ZQqxJl3qEkjHs=
Subject key identifier: B3:90:D5:A3:F5:06:7A:2E:5D:23:C5:F8:31:7D:5F:B2:2C:6D:B0:EA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA7C1C33A13B2C373B07D8760
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f0688875-661c-3588-8aa7-cca6f690ea2a.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 96.0.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:c1:c3:3a:13:b2:c3:73:b0:7d:87:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=1c5f5522-1903-471b-947b-62ebd17fcee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:32:a1:13:86:fe:a6:35:3d:d0:16:8e:a3:4c:
c4:95:c7:67:25:ea:bb:43:7f:02:3e:04:24:07:9b:
04:db:72:02:fe:ee:0a:e6:fb:85:11:ad:99:a3:97:
62:e3:73:07:a8:5d:15:80:8e:60:ae:dc:b4:5a:cb:
5f:68:05:90:62:c6:37:46:2e:db:54:75:36:cb:5a:
e5:69:da:a7:fb:bb:2d:92:b4:bb:3b:2f:7d:af:76:
e7:a3:83:bd:7d:b7:8c:35:53:10:70:fc:89:51:bc:
b7:db:84:db:f0:92:fb:3c:6b:cd:e0:d0:19:b5:a9:
11:16:a5:6e:38:6c:a2:05:0a:eb:02:83:9b:d7:de:
b7:88:c0:15:6a:dd:30:ee:ef:5c:2a:61:d2:b6:e7:
98:fc:4a:8a:5d:35:53:cc:99:04:ec:d5:27:23:e1:
56:70:0c:be:d2:94:82:d6:9f:f4:60:ec:52:65:25:
55:17:4d:bf:e9:e2:f1:a1:2d:e9:ad:a6:0c:06:28:
26:8e:0a:ed:2f:3c:8b:0d:de:2a:90:50:45:94:5c:
ab:be:56:15:5c:7d:7e:01:d4:c2:bb:93:97:22:c1:
f0:fd:63:b6:52:00:b3:ef:2a:cf:ca:76:51:74:a1:
da:a8:fb:a6:bf:92:5c:95:99:b5:0a:3b:75:96:09:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:D5:A3:F5:06:7A:2E:5D:23:C5:F8:31:7D:5F:B2:2C:6D:B0:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f0688875-661c-3588-8aa7-cca6f690ea2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
96.0.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:1f:ce:00:b7:5d:48:23:de:e6:e1:29:87:2c:d8:43:cd:55:
1b:c8:dc:79:11:7a:ea:63:07:85:76:df:ec:78:ed:d6:b0:a4:
5a:f5:15:b9:e1:a7:b0:d2:9c:94:79:c3:de:33:fb:9a:66:1b:
0a:00:72:cb:89:9b:d8:72:89:6a:50:07:fe:09:0b:96:b8:14:
23:e0:41:59:e1:c7:3c:70:b6:e3:a4:5d:89:b1:53:e5:97:0b:
df:31:1c:da:a4:e2:37:34:d0:fd:70:b1:0f:b0:30:4b:10:0a:
dc:ce:4d:0d:a8:9c:b4:34:2e:44:ab:03:9e:4e:71:ce:db:eb:
c1:10:ea:b1:52:9e:e4:6d:29:51:5f:8e:d3:c4:bc:64:4e:60:
a7:10:20:73:96:1d:e9:57:90:05:fb:1b:0c:1b:c2:fd:6d:80:
d8:e3:89:bc:57:8f:d9:25:5f:fe:a4:eb:85:0c:6d:5b:3d:91:
b1:9a:04:85:dd:a1:b0:6f:2a:52:30:2e:75:96:b6:31:60:0e:
05:29:fa:76:fe:f5:ef:d2:ba:de:5e:94:3c:ae:c3:3e:a8:c2:
c1:8f:57:67:c0:d8:84:fc:25:d4:24:a5:09:7c:dd:ad:ee:17:
76:b3:4f:fe:b4:48:eb:f5:06:ec:b2:19:26:e9:e0:47:b7:27:
d7:0b:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:54 2025 by rpki-client