Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6dd9a1b-5a24-3477-9f73-08035da97736.roa
File: f6dd9a1b-5a24-3477-9f73-08035da97736.roa (raw, json)
Hash identifier: XVkO+WZeDRgemZ/Ug/WLCMABAx/aGddr2Fsib/iPZI8=
Subject key identifier: B6:09:25:DE:2D:AC:BB:86:29:B9:63:CF:B3:4B:FA:21:81:26:87:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEA4AFA0902E48CED808E4800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6dd9a1b-5a24-3477-9f73-08035da97736.roa
Signing time: Mon 14 Nov 2022 12:00:00 +0000
ROA not before: Mon 14 Nov 2022 12:00:00 +0000
ROA not after: Tue 20 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 98.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ea:4a:fa:09:02:e4:8c:ed:80:8e:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 14 12:00:00 2022 GMT
Not After : Dec 20 05:00:00 2022 GMT
Subject: CN=99aa187b-21e0-4b90-ad03-3f23a7e8120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:b0:25:25:5d:f1:ad:11:bc:17:6f:9c:b2:
b8:89:4d:82:bd:29:46:53:06:1f:86:b3:eb:c0:e4:
1e:15:7c:59:f5:66:a8:9e:b8:19:cc:f8:83:ea:78:
5f:d4:ee:3b:36:4b:77:63:60:99:cb:44:c3:e5:b3:
f5:60:5c:dc:e0:bc:d2:b2:86:9c:e7:ce:d8:d8:e4:
44:5e:3f:15:ac:84:a7:b7:b5:39:3d:1c:63:27:59:
ed:ad:7e:18:c5:1f:55:fb:51:9d:37:c1:ec:d1:a8:
aa:6e:f2:35:d9:fc:65:0b:74:4d:63:7e:93:27:98:
a7:b9:06:c6:42:e1:85:90:db:b9:97:c9:91:28:2d:
f1:0a:83:ad:c3:ff:37:d3:69:5b:6b:ac:df:ee:52:
bf:6f:e8:8d:15:41:c8:df:01:de:6f:20:fb:85:d0:
a7:5b:a5:e5:df:48:9e:70:28:c3:0b:16:21:34:c7:
50:ab:81:9c:75:b3:9a:5d:a9:99:5c:cc:a9:50:04:
21:ac:50:62:1e:f4:6c:d2:87:d1:93:ba:d7:4b:e7:
f4:28:d8:29:1f:d3:b3:d5:07:c5:3f:28:c0:d8:4d:
f4:d0:d2:86:ab:c7:da:20:28:0f:38:74:1c:1e:54:
4d:2a:93:33:52:9c:18:cd:be:75:f0:47:b2:2d:c8:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:25:DE:2D:AC:BB:86:29:B9:63:CF:B3:4B:FA:21:81:26:87:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f6dd9a1b-5a24-3477-9f73-08035da97736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:23:34:76:c3:fb:d5:6b:f6:46:cc:d8:0b:11:cc:6d:8b:06:
93:77:9b:31:16:0f:91:e7:72:47:16:64:0e:44:67:6f:5c:eb:
37:e6:5a:67:72:d6:1d:17:ce:0e:7e:3a:34:5b:35:79:b5:83:
2c:6d:ad:a6:24:24:7c:5d:93:c6:96:8e:6a:97:d0:08:26:3c:
00:c8:0b:6d:a3:5d:15:9e:6f:0c:3f:f2:dc:50:4c:88:c9:12:
40:0e:94:81:02:6b:5f:d8:3a:a8:b0:69:ce:22:3b:94:10:48:
38:fa:3e:14:b3:6a:3f:18:b7:99:36:23:ee:c8:49:01:e9:da:
bf:1c:48:92:e0:91:9e:cf:41:96:52:0b:79:ee:62:11:3d:0a:
36:34:c7:cf:90:82:ad:76:5a:80:5c:8c:57:2d:d2:6c:5a:e8:
d8:3a:34:f8:cc:57:3f:9f:25:7d:33:f7:4d:a2:1e:0f:da:83:
4a:db:e5:d8:ee:8b:d6:62:2e:5d:55:92:5d:8f:bf:c2:42:e8:
c9:bc:7e:2f:4d:47:34:4a:00:5c:b4:4b:da:b3:c6:2b:98:d7:
92:18:9f:c4:be:f5:0e:03:42:5f:09:8b:e7:5d:ef:16:a0:92:
af:54:78:62:e6:f5:90:30:a0:b2:bc:b8:d8:ff:54:0f:5b:e1:
a7:6e:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:36:57 2025 by rpki-client