Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/203a1ed8-02a7-33e2-9645-69a2dfb074b2.roa
File: 203a1ed8-02a7-33e2-9645-69a2dfb074b2.roa (raw, json)
Hash identifier: Ehe7rpTYKZqZlUuQbO8TuiwLUoXBYbZtgNl1a9r/eAI=
Subject key identifier: E5:32:1A:6E:C7:F8:5C:73:3B:4A:CB:69:FB:0F:22:56:23:6D:F6:6B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584039208BAB2807213BFE095100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/203a1ed8-02a7-33e2-9645-69a2dfb074b2.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 68.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:39:20:8b:ab:28:07:21:3b:fe:09:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=a9791244-a48c-43b0-b00c-0e6ae1712b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:10:06:f7:e9:e5:f1:7f:24:cb:b2:5a:ce:57:
7a:17:b4:b3:0b:b1:f6:1d:5a:53:27:23:51:b5:12:
9b:39:46:c3:58:3d:38:b4:f1:db:d1:ed:2f:75:7d:
90:b2:7c:67:5a:7c:3e:3a:48:b8:83:09:ad:54:b9:
ed:df:e7:2b:ba:d9:24:16:7b:8f:54:8b:53:07:6f:
b6:bd:63:66:71:5d:da:15:0d:43:53:69:0b:d1:b0:
96:7e:a8:dd:ed:9f:e1:bc:40:bb:83:a3:f0:96:70:
26:21:7c:e4:66:df:59:63:33:2f:35:cf:5f:49:66:
6d:d1:a0:6c:bc:91:02:30:8d:34:25:c2:bf:8b:2a:
e8:06:d3:95:c8:7b:c1:3a:64:42:32:f8:81:54:0f:
ab:8e:2a:5b:e0:cc:75:71:7b:12:ff:2a:88:72:05:
f6:af:13:47:7c:df:40:50:f7:1a:e7:d9:13:d3:91:
91:0c:28:aa:e1:7c:2e:6d:00:da:8f:7e:a6:3f:df:
9b:32:1d:ea:0e:4f:d5:f3:88:66:07:dc:59:08:e1:
0b:94:c8:57:9b:83:e7:d9:2d:c4:6c:76:07:60:59:
94:d2:40:ec:b2:cf:c1:d2:6a:d0:91:a9:e6:1d:dd:
8b:e5:fc:f8:86:f9:9a:e6:a5:4f:ae:b3:d7:5a:e3:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:32:1A:6E:C7:F8:5C:73:3B:4A:CB:69:FB:0F:22:56:23:6D:F6:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/203a1ed8-02a7-33e2-9645-69a2dfb074b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:47:fc:94:a4:47:86:0c:7c:ef:87:15:eb:78:82:7b:bf:0d:
e7:19:b5:a2:33:f4:60:4c:ad:dc:2f:41:52:7c:f4:42:06:10:
19:f1:28:f9:2c:db:b8:28:68:27:c9:bc:90:95:36:02:7e:af:
6b:3d:8a:6a:42:ce:78:2b:6e:bc:42:55:34:76:42:3c:2b:f4:
e8:71:77:61:25:12:02:80:0a:9a:78:cd:60:c9:f2:5a:9e:8c:
5d:d0:24:ed:5e:ca:9e:9c:ba:c2:fc:fe:9a:0c:c3:ac:05:ed:
07:b9:e3:19:a9:31:a0:fc:2c:a3:57:f9:c8:dd:4c:0b:6e:a7:
9e:80:e8:ab:ab:4e:0e:d9:10:c5:3b:3f:2f:44:2a:68:63:db:
2c:ee:21:c0:60:28:82:d4:12:44:bd:2a:fc:ab:96:66:81:ca:
4b:35:e6:b3:17:74:30:74:eb:02:01:5d:d0:3e:35:7c:c6:8e:
32:38:7d:91:09:ef:09:17:e1:b7:59:08:6a:14:2f:cb:f3:30:
0f:bf:dd:f9:8e:c7:79:87:ea:ec:40:eb:3e:86:7f:c9:f0:e1:
97:3b:e3:c6:53:df:06:5b:c5:06:a9:85:21:a8:c9:69:19:d1:
9b:ce:95:a5:06:be:b0:70:d7:e2:99:24:57:bb:02:09:b1:14:
6b:83:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:36 2025 by rpki-client