Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07471491-c356-3011-95f5-0f149a89f80c.roa
File: 07471491-c356-3011-95f5-0f149a89f80c.roa (raw, json)
Hash identifier: eeVwbHdjj+IBl4s/wXft8KGjgLcuwczeLyf6Ih7lPqQ=
Subject key identifier: 38:7F:90:E7:39:5D:55:E8:D3:61:90:CB:C4:1E:4C:FF:93:4F:D4:7F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CDE7810B98EF54BFF9C5CB600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07471491-c356-3011-95f5-0f149a89f80c.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 146.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:de:78:10:b9:8e:f5:4b:ff:9c:5c:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=789ac0e5-3b83-4be2-a10a-14c7e49bfa34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:83:50:64:7d:dc:e0:58:35:c3:dd:a5:c2:
b9:6a:15:82:17:22:60:0b:27:44:8d:98:18:39:04:
6c:20:cd:55:dd:08:e8:58:6b:21:10:91:b2:d9:56:
6c:f2:6e:fc:56:97:f6:fa:16:af:96:ac:89:40:7d:
3b:25:9f:be:23:fd:1f:71:6e:d3:20:4c:e0:cb:fb:
ee:e6:a5:78:b3:fd:cc:fd:ca:24:82:3f:8d:99:67:
32:bc:a7:1f:c1:c1:c8:ad:78:33:54:50:b7:e2:17:
f9:4f:5d:6e:a3:e7:23:20:41:56:10:08:7e:75:3f:
f2:56:4f:ea:b2:1a:af:ed:bc:92:9e:aa:7d:ec:92:
6e:d1:cf:b5:7c:67:c4:07:7d:0c:9a:05:38:2f:06:
6f:bc:d8:ce:4b:93:51:12:61:19:8d:ac:60:c3:19:
91:61:32:ea:da:d7:60:bc:60:65:cc:f9:cd:ab:d4:
e9:df:18:73:6c:74:a1:39:4b:fd:18:71:16:07:19:
8a:12:6b:b9:20:2b:30:ea:39:29:e3:6c:33:cb:d3:
27:ba:96:66:79:61:5c:1d:70:fc:8d:f4:c5:2b:3c:
ef:6f:19:d3:a0:70:20:b6:cc:ca:96:96:35:2e:6d:
5a:27:e4:d5:84:3c:a7:7c:89:8e:07:da:fc:8b:7a:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7F:90:E7:39:5D:55:E8:D3:61:90:CB:C4:1E:4C:FF:93:4F:D4:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/07471491-c356-3011-95f5-0f149a89f80c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
146.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:49:aa:64:a2:92:27:2a:83:15:40:2b:01:d8:e1:b6:f7:65:
ea:c9:63:fe:78:fa:19:e8:8c:8c:d7:b3:f6:50:d9:93:54:d9:
ff:3a:62:34:0c:16:65:53:cd:55:65:2b:2e:30:bc:3b:16:b9:
f3:09:1a:99:3f:3b:5d:ae:62:b8:e1:d1:22:c7:08:7e:59:38:
85:a4:56:da:08:46:ff:b4:18:5d:51:71:d3:93:e0:7e:55:62:
aa:b0:31:74:32:51:6d:ef:6b:f7:95:f7:ae:d4:55:d5:98:bf:
2c:b3:2a:6a:5b:13:8c:ba:da:7d:ff:43:da:0e:15:4e:ed:44:
12:01:ac:0d:b9:d8:4f:be:8a:7d:57:c9:af:d0:9e:76:b0:e2:
b5:dc:7e:9e:4b:98:c1:16:f3:52:ac:ba:40:b0:7e:f9:8e:8e:
ee:e0:dd:06:82:69:af:ed:a7:70:66:a8:27:6a:06:aa:d5:8b:
17:3b:4f:25:fe:85:9b:3a:ab:f1:fb:a6:60:cb:aa:95:94:bd:
4a:fe:48:b5:ae:9f:75:68:44:04:98:92:cf:30:b6:6a:24:a8:
6d:0a:de:07:0c:2d:b9:a4:7f:56:74:bc:ee:bb:40:b0:9f:fb:
ca:e5:00:54:9f:ed:48:3a:0d:01:17:ac:23:38:a3:cb:b9:a7:
71:eb:81:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:35 2025 by rpki-client