Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1093889b-4b8e-3534-8c1a-f62fc166be15.roa
File: 1093889b-4b8e-3534-8c1a-f62fc166be15.roa (raw, json)
Hash identifier: LfMqzpj/v2obryYKd4LcSDtcyBkgE/32T6nKb5HlNuY=
Subject key identifier: 4B:BF:45:E9:BE:09:81:B3:B6:DF:77:10:74:04:73:2C:27:4C:DA:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401C148FBF7D9DE8882E91F600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1093889b-4b8e-3534-8c1a-f62fc166be15.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 164.195.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:14:8f:bf:7d:9d:e8:88:2e:91:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=70b18d51-9749-4d7d-99ca-fc78922e3897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:b5:f3:e7:c5:33:bf:f1:da:db:1c:40:be:
22:32:1b:a8:80:9d:30:c5:6b:88:de:81:25:da:4a:
d4:ce:b1:91:6f:8d:dc:8c:79:fe:29:f2:df:e4:1f:
2a:43:92:cb:63:ba:60:34:f2:af:25:3e:e8:33:2b:
0b:ef:68:37:20:a9:cf:cf:0d:e5:ff:a2:f8:65:7a:
f6:49:c8:f2:7e:d0:b4:ed:13:1a:ba:5c:5c:30:41:
58:0b:d1:ed:94:0a:8a:3f:08:36:2b:4e:9e:75:63:
30:f5:5a:80:6e:61:1e:ca:2b:d4:54:e7:35:70:f9:
3f:7f:9d:cb:dc:02:d0:0e:ec:f3:f5:70:0b:77:a4:
22:4d:81:e7:60:1d:b1:ff:62:8d:01:1b:6e:ab:be:
82:81:2c:12:f1:54:7e:62:44:1a:70:90:c7:8e:7f:
67:00:4b:10:d9:dc:fd:5c:29:15:77:8a:5f:0c:24:
36:97:1c:97:83:6a:92:a3:a5:a9:32:85:8a:7e:da:
f4:d4:31:1d:23:4e:7c:85:cb:9d:f8:3a:8a:a1:a8:
40:fb:14:a5:43:87:36:fe:cd:a3:49:6e:f9:66:0b:
51:de:81:7d:01:6e:84:fb:bf:9d:97:63:ae:00:d3:
55:b9:ab:41:40:d0:dd:df:1e:8b:f0:5d:fa:7b:d6:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:45:E9:BE:09:81:B3:B6:DF:77:10:74:04:73:2C:27:4C:DA:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1093889b-4b8e-3534-8c1a-f62fc166be15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.195.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:4c:8c:09:b2:03:24:2d:32:b5:8a:7c:55:4d:96:b5:e4:a2:
34:5c:38:ac:6b:43:48:6c:7c:82:c1:36:cf:6f:21:ea:bd:56:
34:3a:43:b3:fa:54:f3:25:a2:d5:9f:03:2f:1f:8b:1c:3f:73:
76:b7:0b:83:89:62:a0:d9:19:b4:36:92:14:38:5f:90:b9:b1:
b0:99:e6:ee:62:46:2c:ea:11:11:19:ff:b8:25:10:86:f0:a5:
49:d3:73:68:e9:07:97:90:2f:29:22:b6:34:77:4a:0f:1f:1f:
7a:f1:ad:b1:39:51:37:0b:37:29:a3:78:0f:ed:a7:a0:fe:5e:
4a:ef:01:e6:7d:05:a8:0b:d3:71:b4:e9:e0:b1:30:5a:95:da:
22:e9:e1:e6:db:5f:b4:5a:1d:63:c4:a8:b2:90:d0:4b:da:46:
95:5a:23:cd:4e:1b:74:df:13:86:4e:e4:76:5d:8f:e2:4c:13:
34:e6:f1:f7:52:5b:74:ab:8a:8f:dd:a3:67:f2:c9:a2:3d:5f:
23:37:39:39:28:bb:b3:dc:32:b0:ad:12:b6:26:90:9a:60:89:
22:c7:af:86:e1:dd:11:0e:31:14:f6:f6:09:62:d0:f8:8b:65:
5b:00:48:d8:fb:ec:00:a7:21:12:91:d3:a6:72:6a:0a:86:6d:
f6:57:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:26 2025 by rpki-client