Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f8fb084-0acb-3117-b4ad-2634234ccc01.roa
File: 0f8fb084-0acb-3117-b4ad-2634234ccc01.roa (raw, json)
Hash identifier: JTNBKjaHxs4jvFcw1aXuwlSqK86SiHPtB1yeCnTj1q0=
Subject key identifier: A2:6B:8B:4A:AE:E7:A7:54:82:0C:94:3B:3C:26:E1:5E:1E:F5:5A:73
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840177C167173E868DDF46FAB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f8fb084-0acb-3117-b4ad-2634234ccc01.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 153.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:7c:16:71:73:e8:68:dd:f4:6f:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=7f9de36a-783c-4124-b01a-7132efb68277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:71:3f:48:3d:9c:cc:97:5c:56:f0:c0:d8:
dd:77:46:a5:a6:6e:ba:49:24:16:27:70:90:8e:cb:
4a:98:cb:42:81:c9:8a:be:1a:cb:e8:74:b9:18:f2:
ed:20:31:8f:62:71:dc:35:b6:97:45:3f:4c:a1:ba:
35:57:6f:7a:96:33:f1:5a:6f:a3:fc:e4:ab:f6:d0:
fc:fa:48:19:98:c7:16:35:36:d0:35:45:72:c9:28:
43:21:7a:92:35:7e:bf:7a:3e:f4:ea:d5:59:61:a0:
25:e2:16:82:90:0e:93:5b:5d:cb:db:e6:28:a2:2b:
b6:5f:9d:e2:ab:1b:5c:0e:f8:9d:8c:63:6e:43:b7:
13:75:ee:0a:85:f6:13:37:3d:97:c6:00:a8:c3:4c:
7a:52:6e:a3:9e:1c:58:03:99:c1:6b:f5:ec:6c:f6:
39:70:24:9b:1e:7b:b8:7b:bd:c8:0e:3f:17:5f:a7:
f3:e6:0d:87:aa:bf:dd:14:4e:be:ee:a1:52:0f:10:
ce:09:19:53:ef:f1:6e:81:0c:42:5d:a0:ed:cd:12:
87:00:50:ca:b5:48:d8:b5:68:93:24:a7:85:5d:e0:
25:44:0b:da:f7:ae:3a:31:ed:58:ea:db:c1:4e:93:
da:b3:93:bb:c0:c0:f3:14:a5:a3:a7:ac:71:50:a7:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:8B:4A:AE:E7:A7:54:82:0C:94:3B:3C:26:E1:5E:1E:F5:5A:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f8fb084-0acb-3117-b4ad-2634234ccc01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:ce:81:20:73:b3:ca:8b:4b:cd:ce:bb:b1:f6:07:df:99:31:
16:2e:28:c6:91:5a:dc:b1:11:67:d0:34:1c:4d:39:d4:ec:64:
a8:9d:0a:31:1e:8f:43:fe:14:57:e2:c4:b9:ad:2e:08:e9:0d:
fa:92:07:c6:df:32:e4:2e:8a:47:df:7f:6a:ca:7a:38:f2:69:
5c:52:28:52:89:5f:a5:7c:b8:a4:79:e9:f0:61:3a:30:76:ea:
a1:0f:f5:0b:ee:86:e5:3b:d9:e6:0b:0d:cf:99:1d:bb:53:ec:
33:02:e6:a3:9d:5a:d4:e3:be:c5:21:f2:a9:48:04:1b:0b:cf:
7f:13:c9:16:fd:db:f9:33:22:d7:19:1a:5c:4e:e1:e5:9d:b9:
b1:bd:c7:45:31:56:c0:ed:45:6c:27:6d:7a:f1:54:28:8c:dd:
ae:f7:10:b1:54:1c:76:17:cc:48:44:7c:a6:1e:65:0b:90:f7:
f3:9c:5f:65:db:ea:f9:b3:5b:02:21:b9:27:97:f5:6a:3b:e7:
38:4d:26:b3:45:2a:ac:4b:18:46:5f:de:b8:87:13:25:78:95:
72:a9:af:92:b0:fa:15:7c:c9:33:8f:2d:f7:ab:39:ca:f8:11:
40:fd:28:d7:7a:a1:67:6f:d1:83:bf:4a:a6:a4:a7:f4:f5:89:
94:ee:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:38 2025 by rpki-client