Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0125ff50-e584-3b5a-aec5-a2c8f5a7b002.roa
File: 0125ff50-e584-3b5a-aec5-a2c8f5a7b002.roa (raw, json)
Hash identifier: EPhdUaSZbqAm4LZPV5+Cc1RVIzhz59IY/FQYls/xA9s=
Subject key identifier: 5F:92:8E:A5:C4:CB:61:9A:8D:15:DC:0B:D2:43:5A:6A:F0:A1:81:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C6424C8B7F43A841738F3640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0125ff50-e584-3b5a-aec5-a2c8f5a7b002.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 128.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:42:4c:8b:7f:43:a8:41:73:8f:36:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=6f7122c0-60b1-4694-b0c8-ddb3fc8537ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:5a:34:d3:1b:88:90:e2:34:5e:b4:79:5c:
5d:d7:6f:82:2c:13:f2:e9:6e:c5:73:0d:76:96:88:
44:b9:ac:ab:ed:9c:1d:55:e2:06:70:a7:c8:46:2e:
a4:da:94:0f:c1:f8:05:0c:3f:64:91:a3:57:13:c5:
ad:cb:c8:29:db:c3:05:1c:5c:ac:dd:93:83:98:1e:
fc:19:b0:3f:75:44:9e:ae:00:82:59:c2:48:c4:f2:
5d:a9:88:62:7b:7f:8b:7c:ec:ff:32:41:8f:56:d6:
ca:5f:03:42:d6:aa:ba:63:fd:f4:7f:dc:c9:84:8a:
01:ee:d3:37:ba:7b:74:c6:a8:6d:82:25:4d:07:9b:
91:5a:0f:aa:cc:55:8a:b8:13:df:da:3f:81:8e:f9:
40:6e:65:4b:ee:42:9c:ee:a5:30:90:f6:80:c5:22:
52:29:80:7d:97:55:c0:10:a4:96:4a:22:97:d5:a6:
79:3e:3b:a8:92:6f:c9:99:45:5d:bf:4e:7e:5b:4b:
78:7f:1d:e6:13:28:20:de:77:4d:94:7e:26:83:5f:
ce:19:83:d7:49:9a:a9:bb:f2:4b:7d:53:e4:b8:11:
53:8c:2d:d8:20:a9:a6:c4:dd:0a:1a:41:66:ec:18:
a8:d1:a6:47:00:4a:36:da:a8:2d:93:da:4e:eb:b2:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:8E:A5:C4:CB:61:9A:8D:15:DC:0B:D2:43:5A:6A:F0:A1:81:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0125ff50-e584-3b5a-aec5-a2c8f5a7b002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:fc:57:51:71:3c:17:9f:47:84:50:85:ad:25:95:1e:b2:fe:
a5:c0:40:4c:1b:e4:2a:a4:8f:f8:6a:5b:93:e2:94:4c:83:33:
5f:40:8b:cd:c3:31:e3:5d:82:02:6d:1f:97:21:dc:4b:56:6b:
c2:23:61:69:aa:d8:06:0b:93:89:a3:b5:86:0d:11:19:25:74:
85:7e:31:2b:f6:79:f3:12:e1:d8:f7:6f:9f:40:57:6a:37:07:
bc:f4:f6:25:98:78:f3:65:10:c5:6c:79:21:3f:9f:b0:f1:3d:
d0:2f:33:ba:83:cf:3e:ac:ea:42:1c:02:77:b8:d6:74:27:b1:
af:c4:91:b5:18:f5:16:db:52:16:f5:ae:b1:2e:ca:e1:4a:96:
33:30:94:06:35:5e:c1:b9:e8:45:13:08:c4:18:bb:d3:70:79:
f7:9a:ce:fa:2b:b5:88:19:1c:da:0a:4a:02:da:18:ce:f3:75:
e9:11:5d:73:32:73:6a:7c:59:cb:bb:4e:e3:4a:52:7c:e8:f6:
a2:a3:60:0f:d8:ec:0b:20:9e:47:a7:99:15:91:98:d1:93:5f:
38:0e:4a:7d:68:07:6a:36:83:e7:d8:de:8e:a1:18:34:57:d2:
b8:a1:aa:6f:37:67:7c:b5:ca:45:4d:e1:ed:8a:97:6c:74:37:
e5:aa:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:59 2025 by rpki-client