Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa
File: b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa (raw, json)
Hash identifier: 0i33la8sGDa4UvxlOtc9L/cMnqH2mfgvQNIcpGOxJpA=
Subject key identifier: A6:10:6D:59:9D:5B:26:F5:C0:82:43:8F:F4:EF:07:41:50:52:F0:54
Certificate issuer: /CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Certificate serial: 010D0C9F432858489A3B479CE497C822017C2BC0
Authority key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 396279
IP address blocks: 172.83.3.0/24 maxlen: 24
2620:12f:100f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:47:9c:e4:97:c8:22:01:7c:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=2abaaccf-e8f6-4c4e-8314-48241b65e688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:53:2d:9f:d1:c3:61:42:04:09:9a:c4:87:c4:
76:73:61:c7:76:d5:38:d2:93:ec:f1:68:8c:c8:9f:
b0:5b:0f:cb:2b:f2:c4:05:47:fa:66:66:91:55:5e:
fd:3c:fa:42:19:13:4d:50:6f:16:e0:de:28:b0:78:
03:fb:2a:60:40:db:32:93:ac:2e:43:0e:7c:42:16:
21:c0:44:db:0a:59:2e:65:92:ce:62:23:24:55:80:
a8:52:9b:d2:7e:f2:6c:37:76:2e:3b:01:6a:86:50:
25:4c:32:11:29:52:53:9b:2f:48:11:b4:a1:65:fa:
57:53:56:06:10:ff:0e:b8:6a:8f:c3:b4:3c:ae:8d:
8b:f4:45:10:06:04:3b:b0:7d:f7:b3:32:08:cb:2e:
00:b1:c5:d2:d4:aa:39:6f:e5:12:ea:6a:7e:f3:f8:
9b:84:f0:63:3b:ce:4e:fd:5a:b6:a6:1e:a8:80:6f:
bf:76:0f:77:8f:3d:f1:d6:03:70:df:4a:e7:de:c6:
05:ad:03:0c:35:1b:45:74:e2:06:cc:5d:9d:17:57:
0b:fa:79:0a:ff:92:12:c6:bc:ff:65:cc:56:b4:27:
c7:98:a9:ba:a8:af:55:85:2a:62:8b:ec:3d:a1:47:
94:e2:c4:a5:ee:d7:c1:1b:3c:00:f5:38:51:fd:46:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:6D:59:9D:5B:26:F5:C0:82:43:8F:F4:EF:07:41:50:52:F0:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl
X509v3 Authority Key Identifier:
keyid:A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.3.0/24
IPv6:
2620:12f:100f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:00:1f:16:84:18:44:07:87:6a:ee:80:33:36:ca:53:81:95:
e7:63:3c:91:b0:61:30:23:6e:cd:e1:7a:4f:b4:7f:44:28:1a:
e2:d8:3b:1b:31:4e:53:54:0d:25:1c:56:dd:0d:9e:31:de:bc:
7c:6b:5c:40:cf:06:08:75:0d:68:b8:93:1d:d4:16:e7:91:87:
36:ab:b1:ef:7c:01:6d:45:fc:c7:6e:1d:be:a3:f4:98:fc:dd:
c1:f8:fd:8c:81:1b:b0:57:5e:52:2c:3f:97:b2:a1:b5:0a:4d:
c1:70:58:1c:aa:48:23:d1:05:63:14:a5:2d:b5:a6:c0:98:c3:
10:4f:36:11:c5:20:e2:83:85:01:15:99:97:3e:c1:ba:47:6a:
43:3c:c6:6b:87:5a:c8:e6:30:69:22:bc:f2:a1:85:e6:4f:db:
88:e1:85:5f:80:af:80:ae:65:e2:40:27:54:fc:a5:d3:c2:81:
45:3f:67:86:69:20:43:93:30:dc:c3:cf:09:fb:ac:c2:f8:03:
f4:27:32:35:00:48:85:59:61:f7:66:2e:8e:9b:cd:31:d1:29:
9d:81:ee:89:52:56:ee:3f:f9:94:60:b6:f2:43:83:f1:8e:ef:
6f:cb:3a:82:83:ff:b4:3f:9a:90:59:32:ec:03:1b:93:b9:c1:
12:07:57:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:09:12 2025 by rpki-client