Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d574ce9-1bb6-3643-9bf0-bf2e320b6442.roa
File: 0d574ce9-1bb6-3643-9bf0-bf2e320b6442.roa (raw, json)
Hash identifier: np8q/7Lidi+hi8mmSdqUz71fGnkHX+HPxLmcmaYHlxs=
Subject key identifier: EE:D3:14:79:45:03:E9:E3:3B:22:EC:52:89:51:21:DB:38:E0:9B:F6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404690D5BF82C5DF9372949C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d574ce9-1bb6-3643-9bf0-bf2e320b6442.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:90:d5:bf:82:c5:df:93:72:94:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=c85532b0-8df5-47cc-b125-f7c2c983a50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:7a:8d:b6:de:49:ad:09:fc:99:47:6a:09:
d6:93:34:77:8f:91:1f:d8:27:0a:54:da:8c:ce:54:
48:90:54:4c:ed:ec:62:2c:39:e3:0b:72:72:5f:81:
ac:6d:4e:91:5f:dd:2c:98:89:4c:b3:56:c1:d8:62:
4e:3c:0b:14:cd:0b:ae:5b:80:1b:8f:c4:85:87:4b:
71:cc:43:ff:52:e3:55:00:2d:69:1f:c1:3a:d5:86:
a8:5e:4c:57:ac:90:c2:44:f2:f6:21:5c:a5:5d:69:
eb:7d:a9:fc:20:de:2b:28:3d:fe:b5:89:45:83:96:
13:cb:ca:fe:1f:e8:d0:8b:6c:57:e3:c4:fc:85:aa:
c6:36:6d:f9:d6:04:e5:f8:a7:59:02:c3:b5:4c:3f:
f2:30:38:1d:db:1a:e6:4d:63:08:45:9d:4a:be:af:
19:c7:70:d7:87:39:61:2f:a6:36:f3:9e:33:40:a7:
93:5c:93:8c:0d:a6:ba:c6:48:9b:b6:88:63:3c:3b:
50:e8:5b:e3:98:72:db:ee:88:ad:20:e5:67:80:df:
75:24:9e:15:99:9b:e3:4b:84:9c:39:23:e3:66:16:
24:47:ef:c7:23:0e:60:3f:1c:90:87:b8:8d:ac:39:
ae:4e:e4:e1:25:70:26:e6:f9:cb:25:ac:20:a1:78:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:14:79:45:03:E9:E3:3B:22:EC:52:89:51:21:DB:38:E0:9B:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d574ce9-1bb6-3643-9bf0-bf2e320b6442.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:09:7d:51:78:42:3b:79:8b:14:57:99:0d:18:f0:3c:c5:ef:
52:4a:13:70:fe:d3:b7:01:3a:27:c1:5b:21:4b:76:e3:a0:8f:
95:b7:7a:be:2e:8d:25:92:b5:a9:41:4d:2d:15:60:bd:24:9f:
85:e0:4e:6d:e5:8f:21:b9:4d:5a:5c:ac:be:3c:88:65:c1:21:
3c:a5:a7:20:4a:e6:4e:48:d4:26:3f:af:93:3c:b1:3a:5f:17:
e9:9e:f7:b3:69:9d:5a:da:5a:40:21:f3:40:6d:ac:f6:d3:8e:
8c:31:f2:8b:d9:8c:b9:ef:30:cf:f0:e1:25:51:4b:c5:28:9f:
54:b9:30:70:78:bd:22:7e:50:11:77:f4:59:67:00:f4:3e:35:
50:22:ea:89:c2:ea:65:ae:2b:83:25:81:89:7e:80:58:b2:d3:
1c:f6:ea:96:78:97:3b:6c:59:ef:d9:6f:e4:24:ad:99:0b:cb:
bc:73:17:c0:d0:53:ba:95:54:f2:53:bc:9d:bf:b8:63:25:9c:
e1:d1:5c:d6:54:61:8a:b9:65:96:d3:2e:9e:29:4a:53:1e:da:
95:1f:a5:4c:a0:ac:44:25:37:ff:a8:67:96:b5:62:6d:df:d8:
2a:1c:e5:91:b2:27:33:5f:c4:cf:b6:f4:ed:54:d9:4c:ee:40:
b0:84:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:55 2025 by rpki-client