Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d5ffce1-cd02-3495-a780-9a1e35758b86.roa
File: 1d5ffce1-cd02-3495-a780-9a1e35758b86.roa (raw, json)
Hash identifier: tVIIH1zGt5REIHpfMb08XdxK64HB7u3Pvdqtnup4jSU=
Subject key identifier: C1:08:A3:50:06:D0:76:E3:04:C8:5C:FF:ED:CD:44:F9:04:29:32:22
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC33CDCC19E193C046A3D0080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d5ffce1-cd02-3495-a780-9a1e35758b86.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 151.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c3:3c:dc:c1:9e:19:3c:04:6a:3d:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=0a7aadae-ea98-4600-ad40-ff472ffbbaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:38:e3:42:69:c0:9e:f6:db:f6:8b:a8:bd:
71:fb:b6:ef:c5:5a:f1:df:c9:a3:12:44:3a:72:84:
89:a4:e6:9b:2f:58:a7:de:7b:8b:19:f1:ab:80:61:
1e:4b:99:df:94:00:45:4b:d3:ec:08:23:c8:24:76:
79:cf:31:e9:92:ac:b3:59:4d:c8:c9:60:67:38:e7:
29:ec:f3:e7:1b:fb:0b:df:88:01:87:7c:60:06:8a:
c4:d3:40:93:97:83:b5:e7:d7:a4:e2:2d:81:24:48:
66:a7:46:12:bf:3a:4b:d0:32:bb:5c:61:6a:d5:f6:
a1:eb:71:a9:c4:f6:a5:7e:d4:47:20:85:47:1b:46:
bd:85:95:7e:ea:f2:ed:1c:10:95:ca:39:7b:be:97:
f7:45:8c:cf:3b:48:70:29:bf:9b:f3:4b:aa:8d:d5:
05:2f:51:0d:03:81:3d:3c:de:67:d2:f9:39:4e:fd:
6d:46:01:19:74:80:0a:db:e2:21:c7:9e:91:63:d4:
23:fc:da:f5:3e:14:59:4a:1f:af:86:23:2c:c5:7d:
3f:62:07:9a:ce:a6:26:25:73:38:5a:2c:16:48:41:
75:f6:95:40:c2:52:8f:1b:af:ab:2b:86:d1:84:43:
16:4c:78:94:d5:2e:79:fc:26:3b:47:94:ec:97:1a:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:A3:50:06:D0:76:E3:04:C8:5C:FF:ED:CD:44:F9:04:29:32:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d5ffce1-cd02-3495-a780-9a1e35758b86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:81:9b:4c:46:88:90:6a:f6:2d:21:35:0e:1d:12:38:4e:02:
87:06:7a:77:ba:db:30:bc:6a:f0:21:0e:ba:cb:82:c2:09:31:
3a:d6:33:b1:d3:3e:e1:73:ab:ea:75:48:a6:b3:dc:50:ca:a5:
18:c9:27:9d:bb:31:6b:7f:39:37:df:2b:d9:3d:ba:93:a3:6d:
66:fa:27:f3:75:c5:7c:66:58:23:80:bd:37:dd:e6:b1:ce:e2:
39:90:8d:c9:b8:cd:87:f3:e5:3a:99:fa:36:bd:fc:d9:ef:88:
72:3f:ce:06:c5:6f:80:58:a9:4d:be:1c:97:d0:bd:35:78:e4:
cd:0f:95:a3:37:28:8f:68:36:ca:c7:f4:d0:28:7e:dc:0f:86:
06:41:e5:71:69:5d:75:4f:25:07:6a:4f:8a:80:fc:5b:ab:e5:
36:2d:5d:51:cb:ab:2c:fc:43:37:37:98:de:52:f7:e7:5b:33:
48:5d:f0:bf:4c:c9:7b:88:43:64:92:23:52:1f:a6:c9:76:bc:
eb:89:13:c6:81:5c:5d:4a:be:1b:92:21:cb:47:20:79:da:3c:
ac:ab:40:56:03:94:03:be:d1:b0:1c:d8:78:91:20:a7:8e:42:
2a:cc:56:c5:8f:23:14:a1:94:3b:c3:93:83:e5:2f:37:95:bc:
04:18:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:43 2025 by rpki-client