Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/237634bb-adbc-3374-a05a-453cd2fb3fd2.roa
File: 237634bb-adbc-3374-a05a-453cd2fb3fd2.roa (raw, json)
Hash identifier: RvuqdlBJ/YNm8EBaAYTYwg7MQHsyanK8FQebf3UfeJU=
Subject key identifier: 03:13:0B:C7:AC:A5:A9:FB:CA:2C:BE:8B:66:D3:54:BB:74:61:30:8C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB1AC59E49828CAB58FFEB100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/237634bb-adbc-3374-a05a-453cd2fb3fd2.roa
Signing time: Tue 25 Oct 2022 12:00:00 +0000
ROA not before: Tue 25 Oct 2022 12:00:00 +0000
ROA not after: Wed 30 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b1:ac:59:e4:98:28:ca:b5:8f:fe:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 25 12:00:00 2022 GMT
Not After : Nov 30 05:00:00 2022 GMT
Subject: CN=5283075b-b80b-4452-ab0b-9f90f8c5bd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:69:da:2a:53:5a:90:2b:61:4b:cc:78:50:
19:51:a3:06:bd:5d:7b:c0:59:75:5e:56:fb:ed:1c:
87:0b:ea:5e:61:5c:03:28:b9:6f:96:f9:e5:65:1f:
f3:85:35:fe:e8:b5:ac:35:4c:cd:9e:21:94:ac:55:
86:cd:50:c6:69:2c:41:28:8d:9b:52:b5:fa:aa:e2:
5f:5e:71:ec:53:45:a5:82:41:57:35:58:7f:15:2c:
b5:7a:ad:e7:29:eb:96:74:ee:e2:11:6d:36:b0:de:
72:4c:a9:74:16:ff:ec:ea:f1:15:7a:bd:5d:16:fa:
21:23:26:0b:f5:b2:f2:a4:c3:9f:b4:09:fc:54:42:
52:ce:ce:67:99:b0:f2:07:f2:12:ab:72:74:82:18:
5a:97:bc:16:b1:96:2f:8b:4b:09:e0:fd:e4:92:19:
89:a5:30:ad:5c:8b:37:25:ed:79:3a:b6:60:af:4b:
0a:10:8d:83:eb:5c:19:98:78:cb:83:db:5a:fd:ac:
7e:cc:77:bf:37:7b:d3:d4:0c:54:05:95:7c:8a:90:
9b:38:2e:9d:37:b2:d8:4a:e2:8e:11:6e:d1:01:e4:
e2:86:a1:66:82:44:4a:60:47:4d:51:ab:ad:c4:1b:
16:81:48:31:aa:4f:45:04:e9:48:f0:44:85:fe:4b:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:13:0B:C7:AC:A5:A9:FB:CA:2C:BE:8B:66:D3:54:BB:74:61:30:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/237634bb-adbc-3374-a05a-453cd2fb3fd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:16:76:c5:85:61:a4:ba:0d:a1:2a:5d:b6:2f:fb:40:8e:f7:
53:53:28:56:07:3a:41:d3:d7:63:ab:07:6f:ab:1f:77:d6:62:
7d:c6:17:37:c6:79:a8:09:78:c5:32:f5:20:2d:4f:40:d5:e2:
bd:fd:ce:51:e8:ea:dd:d5:27:d1:07:10:9a:44:2f:d1:6e:72:
29:87:da:b4:49:01:59:4c:a2:53:0a:d2:f3:cd:95:15:27:0c:
25:c2:f4:6e:b0:e8:63:f3:20:3c:e9:7a:ee:6d:d4:9e:5f:69:
e7:88:59:cb:8a:33:58:06:49:f4:73:dc:63:aa:fc:30:8f:f0:
8b:96:af:e7:3e:04:dd:c5:f4:ea:3c:97:be:fa:0d:66:cb:9b:
13:ed:05:2f:e6:c4:72:64:42:fa:61:ea:18:e0:f9:c8:e0:0f:
a9:b1:5e:75:51:85:d6:0f:e0:db:66:bf:ab:10:28:36:cc:59:
85:b3:b9:eb:d1:20:aa:45:94:90:c0:c7:d8:cc:ef:fd:d1:73:
42:fd:00:6d:30:28:b3:50:01:a2:56:05:70:97:7d:85:d0:c6:
b7:33:5f:d9:96:7f:84:cb:d4:48:a1:f5:99:78:f4:bc:07:9e:
06:3d:02:46:69:43:78:7b:8f:9c:78:74:18:ac:e7:28:1a:75:
e3:95:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:26 2025 by rpki-client