Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d3bbf88-aad0-34b5-8410-c9af0a689a04.roa
File: 0d3bbf88-aad0-34b5-8410-c9af0a689a04.roa (raw, json)
Hash identifier: nBeOvYwT3MhFaR+iqExGLDink0fQxqwh7aEZihF5x48=
Subject key identifier: 0A:6F:D8:5B:27:1F:EF:10:A9:C6:D4:E7:27:DC:D1:02:21:29:D9:F4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C3F633DA2D1E1E21EC34B200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d3bbf88-aad0-34b5-8410-c9af0a689a04.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 143.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:f6:33:da:2d:1e:1e:21:ec:34:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=b917daa2-3abb-4cbf-b67e-9af333a585a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:94:40:c4:6c:8e:cf:2f:36:4a:56:89:9c:
76:60:87:76:40:b8:bd:17:06:35:04:14:1d:c3:f0:
27:7b:d7:e0:61:b3:d6:11:4b:fb:93:0d:5d:16:d0:
a9:67:a7:87:5f:53:39:b4:24:ba:05:5b:d5:eb:0e:
d8:94:f5:87:83:4d:9d:99:d9:51:41:03:07:ce:1b:
bc:72:c0:e0:a1:c4:61:66:ec:98:36:85:38:fe:c4:
5d:c9:3f:d5:c0:41:f2:5f:dd:ef:a1:d8:0d:b7:ff:
79:24:dc:6d:50:93:b5:be:d2:c6:ad:14:3f:6d:4c:
db:2e:ea:4f:df:32:73:ce:3c:cf:16:39:20:06:8c:
09:2f:25:8c:1f:3c:77:a3:8f:d0:c5:09:65:f9:e6:
c6:15:c2:50:a8:bd:b2:23:1f:93:ea:52:55:e7:ba:
b1:55:fc:8c:29:7a:05:3b:5c:be:33:79:ef:a1:03:
3f:47:68:0b:e2:14:a4:43:86:0f:fa:ad:b6:6b:51:
31:0b:7b:1c:b2:16:85:a7:76:f4:ac:aa:3d:f3:ad:
a2:d7:7e:2a:49:99:f2:81:d9:e4:74:6b:d7:f5:5f:
56:0f:1f:43:c2:50:e3:32:89:c9:68:be:9b:77:a0:
c7:51:03:73:d4:87:5f:45:ec:9f:c8:b7:8e:e3:ba:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6F:D8:5B:27:1F:EF:10:A9:C6:D4:E7:27:DC:D1:02:21:29:D9:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d3bbf88-aad0-34b5-8410-c9af0a689a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:4d:15:e4:da:52:68:8b:c7:1f:e9:24:74:db:3f:57:0a:4f:
ab:12:b0:e2:f4:74:af:36:77:a4:5e:f2:79:1e:ea:f7:22:00:
d8:16:eb:73:74:b2:88:ab:81:ef:6f:89:c3:b6:d7:53:c6:60:
53:93:e3:b5:71:3b:4f:8e:92:29:10:3c:fc:3c:72:b7:cf:fa:
a5:d2:80:d9:69:9f:7b:12:a3:91:1c:b7:41:74:6d:65:77:3a:
0f:b3:1d:2d:b9:e5:11:7a:31:11:f1:4f:e2:c3:f7:04:e1:67:
8d:ed:fa:e5:f3:9b:59:f4:0b:99:77:ee:7c:98:a5:92:47:79:
84:57:6e:f3:5b:6f:73:be:91:92:f8:8c:17:55:40:33:ae:7c:
b0:60:44:fc:41:99:6e:b1:47:7a:ad:03:d8:59:92:86:94:8e:
3f:ef:bf:9f:dc:53:6a:be:17:02:50:32:22:c1:21:cf:79:d5:
d3:f4:df:b9:5b:1d:3a:e0:3b:1f:1b:78:9f:71:59:db:2b:11:
aa:07:77:70:98:94:a6:53:44:2a:a4:56:e9:68:d6:8c:5d:a2:
d5:6d:65:e4:7d:97:35:3d:fa:47:13:6e:13:62:74:ef:e5:27:
9d:10:e5:cb:19:33:27:31:53:1a:c1:da:88:fb:77:12:8f:49:
e5:17:45:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:22:17 2025 by rpki-client