Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5f46583-946f-3446-a931-749589a19105.roa
File: f5f46583-946f-3446-a931-749589a19105.roa (raw, json)
Hash identifier: 83nJRgFytMYeJ9iiFUzh6e9yJR+qavCpJXCkhG+tXak=
Subject key identifier: 66:0F:C8:F2:29:32:BC:E8:D9:F0:03:3F:23:3B:54:20:9F:A9:19:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840473BF9F74ECC8B7962FB7220
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5f46583-946f-3446-a931-749589a19105.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:47:3b:f9:f7:4e:cc:8b:79:62:fb:72:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=96b82c8f-740c-4fd9-bcd3-195d60194ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:75:2e:cd:f8:db:04:6c:09:e2:e9:5a:c4:
b7:33:2f:6f:29:8d:7d:7f:6b:4c:08:5c:1d:8c:c6:
48:b9:f4:aa:1f:5e:27:00:c3:e1:f1:bc:e9:a5:cb:
7b:54:b1:22:21:a2:88:27:74:40:ca:66:01:77:e5:
2f:77:73:7c:74:ce:ef:19:e7:78:41:40:e0:e2:92:
df:62:60:a3:b7:4a:39:29:43:a4:13:0f:00:0d:2a:
7c:60:52:2f:ee:78:2c:0d:40:6b:2d:0c:78:a0:28:
ca:61:80:c5:2f:8e:3d:b2:3e:9b:61:3c:bd:08:fe:
30:13:1b:bc:bc:df:49:70:97:2d:f8:51:67:a5:12:
35:9a:78:96:23:3c:eb:5a:43:93:6d:d8:65:de:9e:
71:65:00:1a:ae:b6:21:86:b9:7b:7e:f6:89:51:be:
eb:05:23:b9:c2:a3:75:2f:3c:d1:cc:bc:33:ad:09:
30:0a:78:dd:d7:da:f7:eb:85:18:c5:fc:ea:63:76:
d0:f5:eb:ef:c0:a9:bf:fb:3d:f9:64:0a:cd:dd:e2:
ba:2f:51:98:bd:3e:d1:90:75:5c:ed:d2:16:0e:80:
cf:7f:80:13:c6:ee:1f:20:b6:9f:52:fc:08:30:c5:
fa:06:71:f4:07:5a:60:85:e3:cf:2a:e8:21:de:3b:
f4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:C8:F2:29:32:BC:E8:D9:F0:03:3F:23:3B:54:20:9F:A9:19:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5f46583-946f-3446-a931-749589a19105.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:a8:c0:45:86:bb:48:e7:66:bc:fc:5d:be:27:b4:a6:8d:86:
62:d8:99:2d:e6:8b:23:38:4b:f2:99:84:40:8c:f4:15:51:c8:
d3:9e:d1:6a:6e:c5:c7:62:40:f0:b8:8d:6e:3a:5c:4b:87:6d:
21:11:d7:fc:38:48:f7:f8:ee:63:7a:8d:bf:c5:d9:fc:6a:95:
5d:48:25:37:84:12:b3:bb:60:11:18:7f:32:0b:49:5f:a6:e4:
fd:9e:e2:82:4f:63:51:7f:93:10:07:69:49:7f:6b:55:fb:3c:
f1:72:31:47:07:f7:fb:c2:bd:6f:30:67:74:49:1d:22:50:28:
b5:c8:5b:26:41:ca:2a:ad:9c:62:ed:2e:b8:21:e6:d3:51:cf:
6b:41:ab:47:e2:9e:e0:62:c4:62:e5:ad:0d:67:26:8d:74:c6:
44:91:3f:16:0e:73:b2:e6:0b:64:8d:be:d8:91:7f:a4:26:c8:
54:b4:55:e3:ff:1c:4a:ad:b4:a7:f8:d7:ae:9c:aa:46:86:95:
0f:55:62:72:8e:14:b5:05:77:3f:2e:6a:7d:ad:1a:7d:4c:cf:
ba:d5:75:c3:18:47:60:6a:84:ea:b5:15:03:b1:57:8c:f8:58:
f9:29:d3:e8:ea:3e:0a:0e:ec:10:4b:9c:3f:df:78:a2:c1:d7:
0b:65:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:41 2025 by rpki-client