Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24bf768f-cc26-3a70-b7fd-358264d44ca1.roa
File: 24bf768f-cc26-3a70-b7fd-358264d44ca1.roa (raw, json)
Hash identifier: oECfFGPYHi/QvfIAH7T5+hKKycgsv+SwMDeuwT1ts98=
Subject key identifier: 00:65:AA:22:19:6D:43:66:4D:28:D9:4D:61:29:78:76:99:17:1F:99
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404E45D2D0095773AE5F255900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24bf768f-cc26-3a70-b7fd-358264d44ca1.roa
Signing time: Tue 20 Dec 2022 18:48:09 +0000
ROA not before: Tue 20 Dec 2022 18:48:09 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 128.81.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:45:d2:d0:09:57:73:ae:5f:25:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 20 18:48:09 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=bb5369c5-9faa-47f2-aa16-3f8008d75345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:7d:33:ce:56:7b:f0:25:b2:9b:84:d1:ef:
3b:03:80:e5:e2:36:48:57:b8:00:bd:0b:2a:06:49:
cb:d0:e6:66:8d:cd:57:bd:9f:03:7c:7e:20:07:38:
6a:fb:a1:e5:e6:e1:6f:66:c1:b2:93:a2:3b:4a:dd:
91:24:16:8f:c4:b7:68:b0:0a:d5:8c:4b:05:bb:6d:
08:9d:53:cf:00:05:d5:f6:08:68:b8:e0:85:68:d9:
c4:be:ae:08:0e:49:30:f3:14:4a:db:d4:ec:88:36:
82:24:4d:a4:5e:d1:13:bd:9c:b6:85:45:79:9b:00:
1a:ce:c2:d5:6b:1c:66:42:a0:ab:c8:e6:1d:45:c0:
ec:7f:48:70:c6:8f:23:a7:74:76:1c:7a:cc:d5:08:
5d:02:3b:e4:91:40:68:64:50:ad:c9:9e:2c:b4:d5:
5d:13:4b:69:29:6e:36:65:a0:51:5b:9d:48:1a:44:
0f:5b:75:17:ac:99:80:ce:7c:74:de:8f:b3:e7:33:
21:c8:e6:2d:9e:b3:94:7f:8a:01:c3:af:cd:89:62:
56:69:d8:b7:e0:1e:b2:05:e7:d1:4b:8c:5c:8a:91:
22:bc:7a:71:03:43:73:16:46:5a:29:64:b8:9c:f3:
21:b2:9a:40:ad:78:96:d0:7c:99:0b:07:de:19:4f:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:AA:22:19:6D:43:66:4D:28:D9:4D:61:29:78:76:99:17:1F:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24bf768f-cc26-3a70-b7fd-358264d44ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.81.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:d5:72:e8:ce:c9:97:a8:12:10:4e:4b:d1:9f:a3:d7:60:4d:
7f:09:21:07:20:70:4c:54:5c:37:b3:08:05:a2:d1:4a:7b:c0:
47:cb:cb:00:b2:ff:bf:b1:52:32:59:e5:b1:ea:2f:88:18:4d:
6d:67:c9:ee:61:62:4a:3d:dc:20:d7:28:9f:6c:fe:f2:28:2b:
01:5b:4a:f6:f1:3d:c4:12:3d:ef:26:ff:ad:8f:89:64:e5:98:
c2:96:21:82:c3:08:46:bf:a2:49:65:f4:4c:fa:cb:27:a9:03:
53:89:5d:2a:7e:29:44:da:e5:5c:57:b5:e0:b7:2f:d9:f5:80:
20:38:fd:86:2a:51:43:70:58:41:94:01:18:e0:33:f8:4a:a4:
18:86:3c:4a:be:f5:eb:35:fa:cf:7b:cb:13:89:15:17:6d:a4:
eb:c2:f0:a2:8b:63:55:e6:f1:03:64:b5:d4:32:ac:5c:75:ba:
22:6d:34:4f:92:40:fa:70:8f:c1:63:a0:28:d5:6f:51:1d:06:
84:df:63:29:b9:f3:4e:0a:e1:32:16:3a:31:8a:ae:a5:af:96:
b2:24:55:a7:00:47:3e:52:59:c7:9a:06:95:ef:e7:cf:37:50:
db:6f:8c:bd:6a:61:b7:3f:c6:6e:64:28:68:99:ab:f7:df:60:
da:18:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:17:05 2025 by rpki-client