Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c0079b1-2d5a-34f3-91ef-3d7b6832a516.roa
File: 0c0079b1-2d5a-34f3-91ef-3d7b6832a516.roa (raw, json)
Hash identifier: ks8HIMAJ9J9cUFovJf8JcJThBIgCD1CP6FlnG7zRxwY=
Subject key identifier: 4A:D8:7D:67:87:77:FF:22:E6:32:D8:D0:A1:DF:E3:99:9E:2D:31:E8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584037D255D7257206D8E5A0AEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c0079b1-2d5a-34f3-91ef-3d7b6832a516.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 151.148.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:37:d2:55:d7:25:72:06:d8:e5:a0:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=ca21160a-73bf-465a-97d1-ca2803df5ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:d5:90:24:2d:ff:3b:f9:bb:a7:36:51:9e:
29:c6:52:fc:18:10:08:97:a8:e8:42:d4:34:18:04:
f1:02:35:a3:4c:5c:17:a5:6f:81:ac:38:06:d8:1c:
41:9a:00:7e:09:2a:94:be:44:b4:d3:3a:15:25:33:
a7:4a:dc:fa:5d:ad:b3:ec:21:23:c6:0a:79:ed:ae:
ff:ad:b8:a4:7b:e5:a6:0a:c2:aa:99:9b:98:d7:f9:
0b:d0:cd:be:c3:d6:4a:ba:88:93:cc:4d:f5:db:f4:
83:d0:0e:f6:6c:bd:1c:ba:08:33:43:f2:34:7c:54:
91:ab:be:77:c4:c9:16:77:9e:60:96:95:83:f1:7a:
b0:b6:fb:64:27:50:89:33:7c:ed:32:1f:bd:ef:19:
83:dd:c6:af:da:db:51:30:17:fb:df:89:8e:59:9b:
e6:db:95:e4:db:3b:6e:dd:11:f5:1e:09:64:cf:38:
1a:d8:f8:02:7e:e0:a2:2c:60:3f:bc:17:36:4c:8f:
ae:9e:bd:32:19:71:de:b1:f1:43:44:b1:66:6b:bf:
e7:cc:25:08:4a:53:1e:ac:a2:f1:a2:1c:64:c2:33:
47:aa:b8:a7:e0:df:55:26:dc:fd:79:b8:e1:cc:59:
b8:8f:d3:c8:6a:ec:2f:f2:23:5f:6b:97:81:6d:65:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:7D:67:87:77:FF:22:E6:32:D8:D0:A1:DF:E3:99:9E:2D:31:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c0079b1-2d5a-34f3-91ef-3d7b6832a516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:c2:f0:c2:82:75:4d:1e:c2:af:04:7c:ab:40:7b:b6:fb:b1:
42:ba:90:b8:1f:db:89:fd:b2:d0:0d:44:63:47:ce:66:6d:83:
27:a9:0b:f8:1d:31:3d:ca:30:b7:c0:3e:57:99:e0:08:a6:83:
dc:f7:ff:c9:c4:e3:f8:87:ff:a6:6c:a1:5c:9a:89:71:a3:d0:
38:21:a4:81:34:17:75:b4:a4:51:e1:a8:5f:b5:47:70:f1:29:
5e:5e:57:ea:7b:8e:df:72:cf:66:d8:2b:03:91:7b:89:0d:16:
d2:12:b8:52:b6:f2:dc:0f:15:3d:12:c9:3e:07:90:b1:c6:15:
db:00:8d:a9:97:0e:2c:db:f1:05:f0:ff:3f:28:1c:93:9c:13:
0e:aa:47:54:a8:86:35:ea:24:1c:9f:3f:6b:e6:6c:30:d4:e7:
7f:05:61:d0:e8:52:b4:7f:03:3a:fa:52:9c:64:6e:b3:e0:7d:
0b:69:76:af:06:d0:ff:6d:8b:51:a3:98:81:4f:c2:1a:62:94:
df:9a:e2:70:3d:06:e9:4b:59:e1:a1:bb:c4:48:43:0d:75:65:
82:fa:31:91:18:dc:a3:dd:ad:d4:b0:15:de:a9:d3:ea:0c:e0:
18:5f:f1:c3:12:5c:86:dd:4e:e4:e5:33:98:1f:0a:86:b4:f2:
6d:23:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:36:51 2025 by rpki-client