Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cece0e4-fb14-342e-a599-76c360dc829c.roa
File: 0cece0e4-fb14-342e-a599-76c360dc829c.roa (raw, json)
Hash identifier: aRwWUxZ/cnX88gGGWVFwNLBH0CYL1NhBw1pt6YjByio=
Subject key identifier: 94:2D:7F:7B:1A:07:C3:D6:1A:49:D6:F3:D0:D1:5B:F8:C8:14:34:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E07E7B80477DE8E1C4C6D0300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cece0e4-fb14-342e-a599-76c360dc829c.roa
Signing time: Wed 25 May 2022 12:00:00 +0000
ROA not before: Wed 25 May 2022 12:00:00 +0000
ROA not after: Thu 30 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:07:e7:b8:04:77:de:8e:1c:4c:6d:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 25 12:00:00 2022 GMT
Not After : Jun 30 04:00:00 2022 GMT
Subject: CN=b7dff4f4-c052-4be8-8acf-1f59e91613cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:fe:4b:db:05:c0:c1:d5:88:b5:c4:64:3d:
46:a6:e6:78:9c:c5:71:e7:17:33:b4:d8:84:f2:60:
5f:ff:7e:52:41:39:10:61:75:80:c0:01:7b:9c:7e:
68:09:2d:23:0c:e7:55:8d:0f:32:11:42:36:a0:8c:
bd:69:f6:f4:29:ba:f4:f8:1a:eb:f1:92:19:38:ef:
8d:d0:1b:c9:e6:89:a1:07:0f:46:32:c3:7e:e4:b9:
e3:3a:64:17:61:30:e9:95:2c:b1:7f:1d:da:13:73:
be:ee:b0:23:a6:4d:15:b2:82:42:f1:ac:e5:8a:70:
2d:9c:55:5d:69:05:ea:ca:b5:19:c7:69:7f:4b:22:
bf:ff:c8:95:f0:5f:fa:f9:a8:4e:57:72:ed:08:84:
c8:87:66:ab:76:e1:a2:df:35:c5:3a:80:c8:25:8d:
aa:54:40:0c:5c:f8:e3:45:5c:93:1f:d6:41:7d:32:
e7:d0:06:17:b5:be:52:6e:ae:05:5a:ad:e7:a5:2c:
14:12:8f:e7:e2:0b:4e:44:81:4e:65:26:f8:8a:2b:
2a:ed:1b:b3:5a:8e:9e:fb:cd:7d:e8:d1:2b:eb:19:
66:09:85:2e:81:1c:d7:9d:60:b7:2c:ad:3a:c4:2f:
ec:d0:ed:83:8c:e7:68:04:37:f2:e0:c6:9d:29:f8:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:7F:7B:1A:07:C3:D6:1A:49:D6:F3:D0:D1:5B:F8:C8:14:34:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cece0e4-fb14-342e-a599-76c360dc829c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:68:b7:0d:42:1e:bc:95:a3:26:6e:75:53:12:c6:32:ff:f9:
70:29:ac:b2:2d:2f:37:72:99:06:b2:bc:25:16:b0:b1:c3:23:
65:dc:71:51:1f:77:de:8b:2b:91:46:d2:b0:c5:66:ac:16:99:
c4:fa:a3:7f:4a:0a:4e:02:cd:47:3c:9f:cf:3a:ca:b2:7f:a7:
d7:64:cc:3d:d9:ca:9a:48:be:87:a1:9c:4e:32:25:d7:3a:8d:
68:7a:4e:c8:6f:9a:49:77:ec:c2:da:de:a2:f7:fe:83:64:cb:
b7:bd:c7:e3:d6:53:2e:92:00:58:1f:c1:63:01:0e:99:b4:28:
4c:78:85:6e:69:23:54:6d:3a:59:af:48:29:a0:1f:f4:27:1c:
6a:3b:5c:0d:5d:5f:82:45:45:e0:75:a2:5e:d9:e1:f2:c4:f0:
cb:7c:e8:64:97:a3:3f:bb:b7:b0:28:31:89:1a:85:14:d5:ef:
6f:9e:00:91:c7:4b:31:58:47:00:a5:8a:85:bd:32:c2:d2:9d:
51:97:9f:ec:04:98:f6:ec:15:36:e5:38:50:67:53:cb:42:9a:
aa:99:10:c7:d3:18:02:de:36:05:db:10:77:6e:a4:da:39:64:
22:b2:ab:64:08:b9:b8:f5:62:bc:26:98:ca:51:18:65:9f:4d:
44:3c:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:30:13 2025 by rpki-client