Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20590dab-5efe-39e3-9f72-f9a7ccaf9b97.roa
File: 20590dab-5efe-39e3-9f72-f9a7ccaf9b97.roa (raw, json)
Hash identifier: QiKvwBxKUlcR1JlckbTd6AbvICc298z8Z9kxobHdPbs=
Subject key identifier: A3:01:3D:38:45:35:91:3F:7F:3D:A7:91:3D:66:A4:5B:E1:E3:1C:34
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840350F6819680A423C8FC87000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20590dab-5efe-39e3-9f72-f9a7ccaf9b97.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 158.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:0f:68:19:68:0a:42:3c:8f:c8:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=9c95876a-5a9f-4e9d-871c-90f6b67602b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:17:82:3c:16:61:64:e8:6f:9f:cd:28:96:
d7:34:6d:37:5e:4c:f0:1b:77:05:95:0b:ed:90:4f:
d5:50:40:f0:58:37:7d:13:86:c4:0d:ff:28:8b:ab:
4d:3c:06:08:08:af:50:48:0d:8a:8c:99:d0:1e:f7:
35:80:a8:94:82:44:0c:fc:dc:c2:c4:85:49:37:79:
3f:5c:01:f7:67:e8:6a:5e:fa:23:22:1c:eb:06:a3:
0c:af:21:f1:c0:91:4a:0e:eb:53:53:bf:19:c2:5b:
6f:45:01:63:22:7a:79:44:3c:3e:63:18:8b:59:b9:
a1:2e:b1:68:3e:38:2d:62:f0:d0:d3:d1:51:45:e2:
97:42:09:aa:1b:b6:50:86:04:3b:b7:e9:7b:c0:bb:
a3:f1:c7:3c:94:d9:db:48:5c:07:10:23:d2:71:90:
25:d1:cb:ab:f9:d8:63:6c:89:b0:33:cb:af:36:6f:
cb:bf:ea:78:e9:05:72:a8:61:b6:c5:55:f2:85:77:
49:7d:58:fc:e3:5c:81:27:23:91:c0:30:0c:8b:fb:
3e:79:6b:7d:46:10:de:56:cd:66:47:b0:a8:1f:83:
61:da:bb:fc:0e:b5:9c:ae:d2:c3:9d:9b:60:64:35:
1c:17:cd:ac:48:73:a3:27:78:b1:9d:b4:ef:57:a7:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:3D:38:45:35:91:3F:7F:3D:A7:91:3D:66:A4:5B:E1:E3:1C:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20590dab-5efe-39e3-9f72-f9a7ccaf9b97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ae:83:17:c0:cf:87:4c:02:92:58:7c:d3:d5:85:fc:9c:a7:
9f:ba:a5:af:43:8c:66:b3:62:e3:b6:fc:d1:56:17:19:10:20:
e7:d5:7a:47:37:72:04:88:80:32:d2:54:f7:e3:db:0e:87:8d:
9a:c7:83:27:c7:64:b8:31:a6:af:9e:e7:4f:fb:29:7d:aa:86:
0d:9c:a8:3a:e6:85:ea:5e:f3:7b:31:9b:21:99:aa:56:b4:e5:
fa:7b:93:de:82:b5:f2:84:e5:b7:f2:74:4f:38:bc:b5:47:55:
be:f7:c4:f9:b4:b2:5a:aa:9e:07:60:8e:cf:68:e0:49:2e:f3:
de:24:6f:1e:b3:b7:2d:44:83:0e:23:37:9e:b3:ab:75:32:03:
f3:9c:cb:b9:c9:62:3e:cc:3c:21:4d:81:df:fa:ca:2e:ea:fa:
c2:50:5d:64:a0:2c:d7:2e:ca:f5:82:22:6f:e6:5b:a4:02:93:
51:2e:7e:ea:c5:58:17:f7:2b:7e:e7:92:e4:c3:1d:d9:2f:23:
d0:c9:7b:a3:02:49:19:85:c5:7a:3a:96:a6:f1:f9:ee:2b:f7:
31:92:7d:f3:84:a3:79:3b:ab:28:a9:d6:74:84:a9:d6:c2:19:
cd:aa:b8:62:3a:fe:1d:eb:45:dd:1e:fa:7a:74:ba:71:a8:27:
61:9d:28:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:50 2025 by rpki-client