Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147f2a9b-c838-3b93-bca0-f785b7f46a08.roa
File: 147f2a9b-c838-3b93-bca0-f785b7f46a08.roa (raw, json)
Hash identifier: b5VzWLEZSICvvXCEuc5olmOppM9h5/avEC1OUUI62JM=
Subject key identifier: 7B:3E:A3:E8:E6:B5:45:0B:34:E4:DF:D8:91:FE:6A:26:BB:BA:B0:1A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403925AFEF3BC3C6698F2CC480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147f2a9b-c838-3b93-bca0-f785b7f46a08.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 74.233.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:39:25:af:ef:3b:c3:c6:69:8f:2c:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=2b3c3e15-16ca-4306-9de0-4e4c1b5124ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:9e:ae:37:1b:b8:58:d0:f1:df:21:d4:40:
5e:d2:7d:99:ef:40:77:9e:87:c4:12:8f:0a:84:12:
63:71:e2:a9:e9:47:cf:7f:a4:4b:fd:56:ef:3b:0a:
63:ec:eb:0e:79:01:15:ef:5f:52:68:40:a7:a8:b1:
93:33:25:53:32:20:3b:d7:23:61:2a:73:12:59:7c:
89:f3:91:0e:35:de:a2:c9:97:45:4b:37:46:86:a2:
37:d3:a5:7b:1e:8b:e7:bc:f5:ed:5c:db:e4:5f:92:
bb:31:65:30:a0:61:0d:13:63:04:15:84:90:5a:ab:
70:bb:5e:bc:88:d4:2b:fc:96:92:09:3d:9d:87:d6:
b6:cb:00:47:e8:f4:5a:f2:63:e6:16:da:40:8f:32:
b8:0b:71:fa:5f:c0:20:67:47:78:55:de:0a:51:6c:
c8:ec:98:00:02:d2:60:70:d0:ba:7d:31:e6:b0:c4:
84:d0:eb:52:c4:9f:26:77:54:6a:4e:8c:bd:e2:01:
96:f0:cd:b7:f2:f9:71:3f:f1:a2:a9:8e:88:fd:73:
52:ef:13:ea:3b:72:81:7a:e7:cc:9b:07:aa:46:73:
7d:07:12:f8:ab:f6:fd:6f:c9:b2:fd:0c:d8:f4:63:
d2:23:1a:a4:5e:bb:16:b4:5c:cc:36:41:dd:8c:3c:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3E:A3:E8:E6:B5:45:0B:34:E4:DF:D8:91:FE:6A:26:BB:BA:B0:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/147f2a9b-c838-3b93-bca0-f785b7f46a08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
74.233.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:5e:2b:3a:fc:6f:58:d6:2c:c5:fa:d5:f9:90:2b:a1:be:46:
91:a3:de:af:43:59:09:44:fc:10:43:14:a5:d5:43:91:be:78:
dd:ac:55:c8:d4:a3:9b:3e:66:81:f1:c9:79:e4:3f:6c:ba:e2:
cd:ea:c0:72:bb:76:0a:03:7e:e7:b6:da:66:cc:fe:3d:85:f5:
76:92:13:d7:cb:c2:56:38:ff:8f:87:8c:23:7b:da:06:47:42:
a2:bf:85:29:71:ba:12:25:0f:4b:7b:da:a5:06:1f:69:7b:e6:
fe:b1:52:18:0b:6e:ab:50:87:5d:68:3a:be:77:4e:35:90:ee:
6b:23:83:ff:a7:62:e5:3b:b7:ab:51:40:15:22:95:05:37:a7:
e1:d1:49:6b:24:ae:6d:6d:0f:c2:dd:9c:e3:f5:81:72:2e:a0:
60:78:aa:e7:74:09:6e:6b:0b:39:8c:09:4c:be:24:8d:53:0e:
54:dc:e7:f2:53:74:e1:5c:41:ad:73:19:cf:a5:7b:dc:41:26:
ac:85:b5:25:fa:0e:b0:8d:0f:6b:92:26:64:ce:ae:7f:dd:90:
cb:b0:1e:02:f1:ae:f3:0a:ee:4c:79:e3:87:02:32:83:af:58:
e1:a4:84:51:16:f7:61:71:48:ce:d3:75:d3:3e:35:4f:fe:ab:
25:b9:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:55 2025 by rpki-client