Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bcbdfcd-b61a-36b2-b0f7-ba60c0c5f6d1.roa
File: 1bcbdfcd-b61a-36b2-b0f7-ba60c0c5f6d1.roa (raw, json)
Hash identifier: hIYYDdt4tfLcAxX9cZ0vQ0zo5P/WqiU39LXIUPOjjSo=
Subject key identifier: D3:96:03:D5:B0:B8:8A:69:30:B5:F3:4F:83:A9:F2:D8:25:AF:70:3D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840678388A300059D3781F97880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bcbdfcd-b61a-36b2-b0f7-ba60c0c5f6d1.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 167.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:83:88:a3:00:05:9d:37:81:f9:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=fa03899c-61ab-4597-86bf-f7674aa58408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:85:2c:f3:51:fb:7a:5c:89:ed:4c:a7:86:
5e:22:a5:10:53:4d:d3:eb:57:f4:eb:c3:80:1b:56:
a3:eb:d1:d7:47:62:e3:82:61:d2:ee:12:e7:1c:d8:
e9:5e:86:04:39:97:db:96:08:e5:40:d4:03:85:52:
1e:42:c9:57:d5:02:79:a6:46:6a:fd:b2:52:12:2d:
2e:2c:74:34:af:75:c7:96:bf:14:82:2e:9e:71:04:
53:de:18:11:c7:f2:f5:0f:8a:6e:42:22:16:28:b9:
67:11:f7:db:1f:3b:16:2e:92:07:3f:27:75:0b:40:
6f:0a:76:6a:00:63:c8:86:c3:03:00:c1:cc:cc:6d:
39:e6:50:8d:2f:44:7c:f8:3d:d1:20:17:7e:c1:ac:
d2:dc:f6:aa:54:00:e1:4e:2d:03:98:cc:6f:10:2c:
60:40:ad:57:ce:20:d1:b2:43:0f:bc:7f:fd:27:eb:
c7:21:b0:1c:b8:19:87:31:1c:f2:d8:0b:38:d8:a6:
70:4d:ff:d7:6e:d8:30:7f:ac:18:d7:2b:cc:82:5a:
ac:df:97:bb:a7:7f:9a:44:13:41:f6:86:fd:3a:e7:
54:70:ef:75:a1:77:05:b2:fd:69:19:dc:e0:30:2d:
b8:f0:6e:cb:5c:68:57:b9:8a:46:f2:c5:03:c9:cf:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:03:D5:B0:B8:8A:69:30:B5:F3:4F:83:A9:F2:D8:25:AF:70:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1bcbdfcd-b61a-36b2-b0f7-ba60c0c5f6d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:9d:4d:9d:3f:77:54:06:36:9b:22:9f:6c:18:6e:11:ea:76:
d6:7d:1c:59:ca:11:0b:8d:a7:b4:ad:50:f3:92:6d:44:34:02:
d7:70:f6:41:c0:66:59:cf:7e:9d:ef:48:dc:71:2f:85:40:94:
20:66:57:05:2e:d1:15:97:0e:a4:54:58:cd:0a:7d:a9:5b:42:
d4:31:8f:05:f1:53:8f:01:8a:75:bd:9d:32:10:11:2d:3b:3e:
d8:48:2b:31:4e:5b:d8:9d:38:0c:b2:7e:8a:bb:e4:ff:9e:0a:
0b:d4:6e:ec:27:5c:b1:31:e2:6f:0a:20:07:d7:97:25:92:0c:
d2:85:e5:d1:d6:bd:d8:c7:73:78:e6:cf:96:11:55:82:ef:ee:
18:7b:c7:62:9c:b4:4a:99:c0:5a:2b:07:b9:ac:58:ce:99:a3:
8a:04:20:ce:b3:c5:ce:56:18:2b:ca:87:a1:5a:2d:88:46:5d:
dd:8b:be:66:98:42:07:5f:74:d2:22:1f:08:c7:cf:28:ad:84:
f8:78:93:90:0c:2c:6c:63:b8:0e:b9:24:89:99:0e:97:c3:ac:
75:2b:2c:24:45:c5:42:c5:3c:37:68:e0:18:05:97:c6:71:2d:
08:f1:7c:59:49:54:9a:fc:af:5f:b7:00:85:0e:2f:bf:c1:b0:
51:c4:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:10 2025 by rpki-client