Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/082a68fa-03ce-356d-ae6e-6cd96403d377.roa
File: 082a68fa-03ce-356d-ae6e-6cd96403d377.roa (raw, json)
Hash identifier: 2AkjALvxVPTB/AGtxfLlYOyupXMWxzEoZWzQ4dPXHpg=
Subject key identifier: 5A:0C:68:CE:B0:CB:37:BC:E0:F1:D1:E6:F7:09:07:D6:C0:10:24:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5E18C1323D03C9AE8D723D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/082a68fa-03ce-356d-ae6e-6cd96403d377.roa
Signing time: Sun 25 Sep 2022 12:00:00 +0000
ROA not before: Sun 25 Sep 2022 12:00:00 +0000
ROA not after: Mon 31 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5e:18:c1:32:3d:03:c9:ae:8d:72:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 25 12:00:00 2022 GMT
Not After : Oct 31 04:00:00 2022 GMT
Subject: CN=dd97172e-2b41-43f4-baa4-062269c02f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2d:34:c6:f6:52:53:11:26:45:26:43:5c:d0:
4a:51:41:e2:3f:09:e0:e3:e9:49:25:c8:f6:94:e4:
b0:72:3a:4d:7c:1f:a5:a4:d4:0d:d0:79:5d:2f:67:
14:c5:ef:d0:f9:59:6c:b2:9a:50:54:3a:fb:1b:ed:
1e:ae:6d:e6:f5:3a:15:9a:10:70:ac:5b:2a:d7:33:
bb:07:eb:6c:f2:80:f7:9b:90:96:85:64:31:b6:a8:
7f:ac:43:33:7b:69:23:f6:9e:c4:a2:45:2b:3a:3f:
e2:6d:49:a3:49:f9:08:bb:24:f7:49:47:15:c9:10:
a3:ab:19:8c:05:5f:42:c5:4e:77:bf:e0:1c:7e:80:
1f:15:1e:86:66:fd:1b:26:f8:2d:27:67:28:ee:d2:
25:67:55:18:11:cd:f3:4e:b4:cd:c4:c6:95:8a:dd:
a1:cb:e1:5a:76:ad:0b:44:ff:4b:31:f0:e3:3e:e1:
1e:53:02:e7:0f:b8:bd:aa:17:42:a8:f3:db:72:8d:
b1:41:89:59:b6:68:5a:c8:ee:53:6b:91:14:0d:5c:
d9:9d:d1:c0:66:73:d4:2f:82:cb:76:11:2d:7d:db:
2c:a3:93:35:18:60:a5:07:cc:0f:92:6a:94:74:47:
4a:ac:50:dd:52:88:62:3f:1d:e5:55:39:ef:e9:a4:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:68:CE:B0:CB:37:BC:E0:F1:D1:E6:F7:09:07:D6:C0:10:24:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/082a68fa-03ce-356d-ae6e-6cd96403d377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:bf:93:2e:c6:0c:0e:e0:69:81:b8:26:9e:00:cb:60:89:9f:
7a:9d:b7:af:b5:22:5e:ac:42:59:06:69:1e:b2:b3:35:6c:41:
b8:0a:45:73:84:7f:fe:95:bb:88:7d:f6:7c:f9:77:33:7e:20:
8e:c4:15:3b:16:e2:68:19:a5:7a:21:43:03:75:00:7d:57:ea:
b2:aa:a9:29:34:f2:41:cc:2f:a8:9f:a1:2c:78:23:71:95:50:
0d:24:e4:3f:9f:e6:59:81:46:91:ab:8e:31:ad:e1:81:22:79:
c5:b8:ef:52:f8:bc:0d:b0:d5:a7:11:45:30:a0:0b:9e:62:68:
e4:f7:b2:de:81:eb:15:ab:9e:83:4b:29:5e:5a:69:e4:5c:36:
43:c3:b0:12:c5:13:42:e2:64:a6:7a:96:37:80:97:2c:86:b5:
bc:6d:28:e4:db:db:f8:bf:24:12:42:02:9f:49:22:57:09:42:
6b:9c:82:cb:f2:32:f6:a3:21:3b:d0:44:17:33:b8:fb:94:42:
34:ab:ca:71:30:6d:d5:01:41:a6:03:02:74:e9:e3:f8:fd:66:
4c:7b:5f:7f:26:40:66:3a:e3:92:30:16:5c:9c:9c:b7:eb:8e:
67:9c:55:f5:5c:2b:13:61:14:3d:0a:a7:5b:e0:0e:ad:06:70:
a7:f8:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:07 2025 by rpki-client