Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1c960ae-0c99-3155-986d-c225b1b25337.roa
File: f1c960ae-0c99-3155-986d-c225b1b25337.roa (raw, json)
Hash identifier: 2R5ISxzFhlGdHh6a2VMCVSnJ3jV+I+DdvNfmrpTlPls=
Subject key identifier: 51:09:BA:D8:DB:51:62:A2:87:21:38:25:10:57:A2:E8:FC:24:04:9C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401DBCB92FFB6E0F2824C0AFB0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1c960ae-0c99-3155-986d-c225b1b25337.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:bc:b9:2f:fb:6e:0f:28:24:c0:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=855bece1-5f98-4a1a-912e-249287679976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:87:06:30:9a:11:94:61:a9:47:80:54:73:
e5:5b:9a:0b:06:94:0e:b8:ff:49:18:51:69:db:b1:
0d:98:7c:57:92:b8:c9:7b:87:3e:65:c4:58:82:2f:
a6:d6:75:c0:31:98:9b:9f:a2:56:2e:65:bb:67:77:
c3:c2:4d:fe:be:0a:0a:5f:d9:0c:92:05:b6:f3:0d:
a1:f5:93:18:d1:58:57:a4:63:c8:f2:fb:6e:5f:5b:
be:be:42:b2:70:d8:d6:6e:eb:50:8a:64:1e:33:1c:
fe:e1:cb:b0:58:17:0c:4f:3a:25:3d:4c:fa:e3:54:
40:8d:24:fe:95:24:71:f2:9f:dd:db:5f:be:21:b3:
d0:17:1a:09:e0:bf:29:97:16:93:38:0e:ae:54:1a:
f0:ea:f5:04:8c:24:eb:2c:fa:d9:c4:66:56:6d:59:
4f:a8:5d:ba:1a:a7:79:0c:2e:a1:3f:fb:be:5c:96:
e7:cc:11:82:65:50:a8:52:01:f0:a7:e7:c2:1c:0c:
db:43:b4:3e:61:8c:5a:f9:dc:34:17:25:29:9a:3d:
6e:14:9e:ae:a6:18:56:d9:87:af:f4:c9:38:f6:d4:
de:aa:f2:44:b1:f1:b6:b8:2e:0c:62:5f:8a:c5:5e:
1c:9a:b9:c5:8d:78:f3:d9:8a:e5:16:dc:ce:47:28:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:BA:D8:DB:51:62:A2:87:21:38:25:10:57:A2:E8:FC:24:04:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1c960ae-0c99-3155-986d-c225b1b25337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:29:07:a3:33:2a:47:d5:30:3e:13:0e:6e:b9:dd:63:b5:5e:
95:44:32:96:a7:da:a3:ba:93:6c:e2:43:57:12:5a:45:60:63:
99:76:51:f2:30:0f:4a:26:fa:7a:27:c7:d6:23:bd:45:30:49:
5c:b9:3d:12:00:df:2d:81:68:25:ec:ff:c2:27:e8:8f:eb:4a:
79:8b:ac:30:27:be:e7:cc:ac:2e:b7:70:12:65:2b:20:58:fa:
ed:8e:b7:4e:54:1f:2e:fb:45:3d:fa:16:53:60:e1:ea:34:bf:
1d:c7:0a:77:9f:8b:82:d9:6d:9a:ed:2c:79:9e:c4:d5:83:fa:
43:d3:4d:f9:5a:26:f1:05:a0:5f:56:66:d7:40:d8:d5:d9:e3:
ee:5f:f4:25:c3:73:67:f8:cf:01:e8:85:0f:19:fd:99:3f:8b:
50:88:54:4e:de:ff:6a:2a:bc:17:88:1b:96:8a:01:43:08:4a:
47:2d:56:7e:63:03:c3:c8:aa:bd:98:97:a1:22:04:b2:b8:cf:
ca:d6:e0:9e:51:dc:a4:c5:43:9b:47:a4:04:f6:f6:7e:0f:0d:
b5:27:69:7f:de:8a:8e:dc:ef:58:93:5c:1c:bb:0b:e2:c8:71:
58:cb:f3:7e:22:c0:1a:3a:58:cd:1f:14:8a:81:fa:ae:ff:9f:
6f:3e:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:08 2025 by rpki-client