Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25720514-4ca2-3fc1-83b9-371afaf7f512.roa
File: 25720514-4ca2-3fc1-83b9-371afaf7f512.roa (raw, json)
Hash identifier: /pmbnDC2FzdXWn1wyvLGgoD37Mi0Z3ASEZ2jaUD7Ol8=
Subject key identifier: 80:00:CF:E1:77:7B:C3:46:09:5D:21:92:19:30:B7:FA:96:41:45:15
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D9FAE014916C98AD8EAE93800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25720514-4ca2-3fc1-83b9-371afaf7f512.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 24 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 162.208.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:9f:ae:01:49:16:c9:8a:d8:ea:e9:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : May 24 04:00:00 2022 GMT
Subject: CN=288956a0-dc71-4049-8f0d-70572139afaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c2:d0:0a:db:92:d6:57:a3:69:fd:ed:23:c2:
9a:5b:b9:14:e0:bf:4a:e9:11:70:9f:ce:97:3f:63:
fd:11:e8:27:83:88:6a:cc:28:52:e0:61:5e:b2:92:
fd:5f:28:d9:f1:62:1b:82:e8:47:d4:23:b9:d0:1b:
95:f1:cc:ec:36:d9:27:ce:e8:5f:bd:2b:32:61:5c:
58:40:b0:7e:c5:49:6e:33:a1:a4:01:35:be:aa:df:
2a:33:d6:ea:c1:74:68:6d:40:de:b5:e6:bd:01:aa:
46:de:d3:1b:d2:55:f7:59:dc:2f:5a:83:d9:0d:c8:
9e:39:54:44:a4:fd:41:9f:ad:9e:e1:f5:4d:c5:3b:
47:e1:c9:2f:50:08:6a:b4:34:0d:a2:d6:cb:8e:d6:
f1:e1:4f:b5:52:07:15:28:a7:04:8d:1c:a6:ed:98:
6d:64:70:ac:66:3b:39:3b:23:ae:fd:7a:60:8f:96:
62:d1:d6:c0:b7:ec:23:f2:29:7e:7a:2e:14:ba:8f:
0d:71:cb:3b:fa:de:3f:d9:af:ca:dc:91:eb:ee:43:
c3:f6:12:4d:ec:52:26:e7:b2:40:79:d4:08:6e:8f:
4d:97:11:cb:45:5f:55:8b:e8:e7:39:20:c9:b1:fc:
7e:c3:35:72:02:27:6b:8b:38:bf:fe:8f:49:f5:c2:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:00:CF:E1:77:7B:C3:46:09:5D:21:92:19:30:B7:FA:96:41:45:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25720514-4ca2-3fc1-83b9-371afaf7f512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.208.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:2d:da:aa:45:83:17:a9:3e:3c:39:11:0e:52:87:d1:ef:b8:
f9:04:c6:b0:34:d4:7f:95:04:40:ed:51:97:05:cb:4d:95:02:
38:f0:78:c0:39:7b:cc:d9:51:36:bc:d4:6c:f7:c5:9e:0b:ae:
d0:9e:80:95:87:74:16:0f:40:26:16:eb:ca:e3:36:bd:d2:94:
69:7e:3c:69:78:20:d6:8f:2b:20:6a:cf:7a:42:60:b5:89:3d:
b7:13:a2:31:ba:2e:23:93:e5:a6:90:cb:42:75:08:32:24:0f:
60:da:c1:f8:b8:3a:4a:17:2b:9a:51:97:3e:65:94:50:07:ba:
bc:dc:a1:90:52:d2:1e:7e:22:82:e3:3f:c0:0d:ed:af:91:2d:
77:25:5b:d8:56:a5:1b:76:1c:1e:76:b8:14:58:33:3f:76:d4:
74:3c:64:e6:53:f5:49:73:19:02:aa:fc:30:df:81:21:5d:a1:
9a:ec:6a:c4:af:a2:4d:88:72:7f:7c:d6:30:dd:1b:74:63:f2:
e9:0c:7d:78:68:d2:53:f4:c7:20:5d:81:2c:ba:c7:85:ea:3d:
d2:5a:72:ba:9f:f4:ed:1e:bb:d6:a5:fe:f7:5f:43:50:10:4b:
8c:7c:96:4e:0c:79:c7:18:a0:38:ee:ad:f1:ab:b1:a2:e7:25:
c3:71:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:43 2025 by rpki-client