Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00171dbd-982d-3364-89eb-8009a68e573e.roa
File: 00171dbd-982d-3364-89eb-8009a68e573e.roa (raw, json)
Hash identifier: l5KHGhICvFRMF+aEZRiRtku6MBOMwv4f3zzTEEnKHks=
Subject key identifier: DE:1E:BE:4C:17:74:73:34:81:9C:56:E3:A9:39:37:7F:3D:34:56:D1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401185CB9A8802BC420AE343E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00171dbd-982d-3364-89eb-8009a68e573e.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 151.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:11:85:cb:9a:88:02:bc:42:0a:e3:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=d8de66e9-8d9e-4ec5-b900-dec13eae5890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1b:c2:0a:29:20:43:45:c4:a1:08:7c:bf:51:
5a:c3:11:00:b2:fe:4e:61:8d:e2:b6:b3:21:df:8e:
3a:b7:df:55:e6:83:16:f6:fd:d9:bb:eb:44:e0:3d:
c9:9c:46:e7:83:43:08:04:e6:22:b0:de:75:50:d7:
d0:bd:9d:db:63:21:50:f4:20:60:d9:05:c2:07:41:
b9:b7:ae:6a:85:71:c9:29:ee:1b:b3:68:a6:a0:c2:
bf:15:7c:1e:74:86:b4:33:df:33:73:c3:13:b7:ba:
0b:86:a8:92:46:7f:1a:4f:6b:1f:a6:27:1d:19:21:
18:b2:79:ef:0b:88:f5:50:1f:9e:9e:19:6c:73:85:
e2:c7:84:af:f8:a7:ea:a8:12:c5:de:10:17:61:a6:
eb:22:6c:29:48:04:d4:b5:5f:c4:3d:47:1c:9e:5f:
83:7a:9c:e6:bb:41:3e:79:c4:7e:7f:ea:64:18:a9:
c4:54:ce:6d:13:17:e3:4f:b8:2e:00:51:9e:35:6e:
cd:96:bd:f3:22:15:fb:cf:ad:fc:6d:a9:9e:a7:f5:
d9:7e:4f:69:03:e9:de:b9:9f:2f:1a:f2:46:46:01:
53:49:ae:b3:b5:6c:0b:c8:8a:78:64:2b:b3:42:ec:
5d:60:33:d5:f0:25:ed:1c:89:78:61:fd:36:03:7e:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:BE:4C:17:74:73:34:81:9C:56:E3:A9:39:37:7F:3D:34:56:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/00171dbd-982d-3364-89eb-8009a68e573e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:24:67:39:1d:71:63:05:13:aa:e9:67:f7:2d:2f:b6:1e:c7:
d8:69:31:9d:c4:0e:dc:ce:04:b3:74:23:dc:36:c4:92:29:7c:
0f:0b:49:d2:e1:87:67:1a:93:46:3e:a9:d6:94:a2:4a:93:84:
07:4c:8b:49:5f:63:0a:22:d0:7a:25:94:33:48:5b:91:80:25:
9f:1b:2f:79:ec:44:e1:31:66:66:32:3b:ed:f5:4f:9e:2e:44:
6a:69:ab:c3:c1:3c:cf:c1:7e:07:f1:d1:c6:64:cf:b4:d0:89:
e9:3a:7b:1b:f7:20:7d:9a:16:d6:48:2d:e8:74:2e:22:18:44:
f7:11:5e:ac:77:2d:6c:9c:c3:ba:f8:08:81:1e:a1:87:8e:79:
df:f6:51:47:24:43:5d:e7:09:9c:6c:2b:89:9b:1d:1b:c9:ab:
a8:f7:c4:1b:ac:65:5c:2a:3e:a0:fa:bd:e3:b0:15:12:da:4e:
d9:91:0e:2a:e7:13:d0:55:b6:99:2b:e1:5a:e4:7e:30:80:49:
b7:fd:33:e3:78:ab:91:1f:49:5d:33:3e:fb:41:fe:62:6b:2f:
c0:e4:87:a9:55:14:e4:0c:ef:63:5b:5a:7a:a6:19:a8:e6:ec:
3f:87:3a:62:cf:c5:81:b2:79:95:85:66:f0:c4:71:a1:05:48:
55:2a:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:52 2025 by rpki-client