Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e3acda6-2040-3093-955c-e9cfd4db81f9.roa
File: 1e3acda6-2040-3093-955c-e9cfd4db81f9.roa (raw, json)
Hash identifier: DZe+gqCg2KKTDxnNOc3hy1o4fiV+52CI2vDJ3FRfVS8=
Subject key identifier: B0:E6:00:08:AD:0C:D3:42:B0:92:40:47:F0:E1:BC:2F:D5:F3:F3:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E91835512D922D0B052BE40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e3acda6-2040-3093-955c-e9cfd4db81f9.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 153.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:91:83:55:12:d9:22:d0:b0:52:be:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=17c804f4-1a2b-4415-89c5-a785e3cfc5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:46:e4:9d:b9:fd:34:e6:78:3a:08:7a:ce:
a9:f2:bb:42:e8:7c:be:e4:70:07:01:35:a5:f3:62:
b3:01:92:fe:58:c9:e5:26:11:73:92:1f:c1:a6:9e:
7d:1e:8a:c1:51:02:6e:2e:b5:1b:f6:f1:11:ec:ce:
aa:04:da:eb:27:c6:53:a6:84:1d:1a:0a:43:94:37:
bf:78:fe:b1:46:8c:df:46:4d:42:63:9c:f3:b1:b9:
3a:86:1f:3e:73:b3:81:ef:b4:08:b3:d8:7d:1f:7b:
5e:99:de:ac:c9:1b:32:de:5e:67:a0:c0:28:fa:51:
fa:4d:9b:13:ae:82:93:ad:2a:ca:42:ef:89:5b:a0:
61:13:57:53:2f:cb:0d:ca:4a:8d:d9:d0:e1:c8:b8:
fa:f9:e6:2e:c8:04:0c:5d:b6:ef:14:15:18:f0:6e:
3d:4f:7e:98:a4:26:23:5b:0c:87:b0:ff:56:77:1a:
be:c2:19:7c:7a:7b:ce:55:18:44:bc:50:9f:ed:07:
15:8d:6e:86:89:8c:6c:b3:74:2a:15:29:f1:6e:8b:
d8:dc:48:75:ff:da:87:0e:55:2d:58:1f:15:32:3d:
f9:e1:52:4c:b4:5a:40:a5:16:80:f5:2e:4b:f7:fa:
1d:f3:ae:21:c5:9c:9d:57:f9:1a:b8:b3:5c:83:c5:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E6:00:08:AD:0C:D3:42:B0:92:40:47:F0:E1:BC:2F:D5:F3:F3:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e3acda6-2040-3093-955c-e9cfd4db81f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:66:a4:cf:61:38:e6:c1:68:c0:17:2c:79:8d:5e:ad:23:a4:
ff:39:4b:e3:6a:19:39:06:0b:05:40:1c:08:ee:e7:ba:96:b8:
03:f4:8c:f6:c3:fa:5f:94:0a:5b:3e:58:d6:8b:2c:f9:f5:ba:
11:e2:0e:25:e5:4a:3d:8f:b0:b5:d0:b3:7a:a7:73:8e:f4:3e:
7d:9c:e4:d5:29:e1:e0:da:a8:95:df:f4:9d:78:f9:45:4f:82:
ab:52:07:f7:47:96:33:a2:55:b0:ec:40:c2:6d:b7:83:f1:95:
f4:26:4d:2f:c8:6c:25:6a:7f:8c:62:79:52:71:7a:5d:54:c4:
83:f5:6c:81:68:0b:51:61:a1:af:2b:71:3c:b3:d3:ab:58:90:
ba:20:c9:4a:10:1c:81:cc:dd:35:11:56:5b:b2:4e:97:3a:55:
8b:98:57:4e:af:9b:e3:c5:5a:a0:07:a5:d9:8b:17:73:6f:0b:
76:1e:42:2d:4c:d6:7f:2a:10:42:29:d5:4e:bc:5d:79:bc:45:
9a:29:c3:64:a6:c3:2e:8a:68:1e:a1:62:60:ec:86:3b:40:a7:
1b:77:c0:13:39:ef:fe:e3:cb:04:31:69:03:fb:08:6c:f0:08:
c6:a9:41:70:67:5b:ad:11:a2:20:f2:52:bc:91:29:8d:df:bc:
66:69:e2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:22 2025 by rpki-client