Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13d62c5d-2ad7-375b-a653-22f618129ebc.roa
File: 13d62c5d-2ad7-375b-a653-22f618129ebc.roa (raw, json)
Hash identifier: ifqJcUxNvqzK89x6uHn3SYUkxpV7oXNy1jYAwnD+SVs=
Subject key identifier: 9E:A7:17:F6:03:2A:92:AB:06:D5:31:D1:C3:10:66:36:EB:35:67:03
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA7DB260FF3A9243326DF0970
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13d62c5d-2ad7-375b-a653-22f618129ebc.roa
Signing time: Thu 20 Jan 2022 05:00:00 +0000
ROA not before: Thu 20 Jan 2022 05:00:00 +0000
ROA not after: Thu 24 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a7:db:26:0f:f3:a9:24:33:26:df:09:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 20 05:00:00 2022 GMT
Not After : Feb 24 05:00:00 2022 GMT
Subject: CN=9011fba1-5e83-4ab0-ac7d-189ce479259a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:55:a7:a9:28:47:8f:57:61:d0:55:70:fe:42:
69:87:b9:10:dc:3c:3b:2b:5e:cf:e0:2d:4c:e0:f5:
2f:80:fd:40:77:57:c9:0f:42:41:50:85:f8:34:60:
99:f1:c9:7a:14:11:57:c1:cd:2f:e8:b4:01:22:de:
fd:1b:a3:8a:14:b5:92:aa:05:88:59:d0:66:3f:1b:
ba:a0:91:c3:6a:14:96:33:61:06:51:2c:57:63:bc:
2e:10:76:51:b3:0a:ee:0e:8e:c3:df:76:9e:58:52:
73:d7:22:54:be:86:6a:11:55:0c:cb:b8:12:0d:91:
c4:5a:18:2e:a9:c0:50:41:0e:87:24:86:ff:c8:a9:
2e:3a:26:b5:23:45:15:0b:c3:da:c1:5e:2b:c4:d5:
8a:58:43:53:0c:17:32:56:63:0d:46:39:82:8b:41:
f5:43:93:0e:d1:e8:bc:d7:24:76:fb:09:e0:85:a3:
cb:ba:41:45:3c:c7:4b:7a:49:18:51:78:56:7b:8c:
30:5f:38:8f:b6:21:fd:32:7d:bf:b1:23:5a:6b:33:
14:d3:6c:dd:22:cd:81:d2:1e:2a:08:d0:08:6e:bb:
61:23:0f:23:27:d7:62:b4:3b:cb:7d:ba:ac:a0:b9:
93:9d:b7:70:d5:37:de:95:4c:c9:60:47:f9:ee:b4:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:17:F6:03:2A:92:AB:06:D5:31:D1:C3:10:66:36:EB:35:67:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/13d62c5d-2ad7-375b-a653-22f618129ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:3a:28:d2:7f:c5:14:a4:e6:4d:f6:38:91:0a:ab:8c:43:06:
05:8b:86:35:20:ff:7f:a0:6b:4a:df:e0:7a:dc:7e:6d:4b:92:
a6:c0:24:1b:f2:f9:36:99:0a:96:b8:35:d2:73:09:9b:bc:7f:
4c:dd:7f:7f:a6:62:87:85:fd:b5:1c:e2:8a:34:8f:aa:83:19:
68:1f:6c:ee:e6:0a:3b:e7:da:a9:8e:d6:12:ac:a2:c9:69:cb:
60:b7:77:b8:09:0e:ee:f4:20:3f:41:da:7f:92:8e:fb:5c:5a:
5a:15:4b:13:63:d1:9f:f7:54:80:5d:21:cd:cc:09:0d:53:20:
4a:d1:da:19:44:05:c4:4b:c0:d4:78:15:a5:56:fa:f0:a3:a2:
7a:a9:08:36:c8:9a:49:54:3c:1a:f0:90:ea:2a:53:79:c7:7b:
30:b4:d0:45:5a:eb:3d:9d:a2:6e:05:84:e9:fa:c7:ad:eb:be:
0e:8f:ca:3d:77:d4:ef:56:02:25:93:b2:55:8e:1c:17:d4:34:
6e:32:24:b8:54:27:a6:33:93:63:75:d5:4a:51:89:e4:66:d6:
32:a9:ac:86:62:88:d3:69:b2:86:d7:1e:ef:b4:f0:95:94:05:
5f:8b:69:38:70:63:a4:3b:3b:fc:77:a1:aa:b8:bc:4f:e0:05:
92:d6:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:14 2025 by rpki-client