Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2766406a-f207-3357-a386-05502b186b2e.roa
File: 2766406a-f207-3357-a386-05502b186b2e.roa (raw, json)
Hash identifier: 8zuEDBDfAo4mKQusq2txzoOv8BQBabF6Z1WwR5NQqRQ=
Subject key identifier: D4:F4:DC:BF:72:4C:DC:33:5D:95:0B:86:79:9D:6C:A2:B1:92:BC:89
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E2F04944F6D585F918AFCB0C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2766406a-f207-3357-a386-05502b186b2e.roa
Signing time: Wed 08 Jun 2022 12:00:00 +0000
ROA not before: Wed 08 Jun 2022 12:00:00 +0000
ROA not after: Thu 14 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2f:04:94:4f:6d:58:5f:91:8a:fc:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 8 12:00:00 2022 GMT
Not After : Jul 14 04:00:00 2022 GMT
Subject: CN=d1ccc256-ef74-49c9-bc25-f0311c7350cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:e3:f2:e9:a9:b6:d5:27:16:32:2b:42:c0:
cb:ae:a5:9e:ed:7d:67:ec:27:5d:59:c3:96:61:87:
cb:e4:65:69:cf:2e:7a:af:6b:22:12:26:81:7f:2a:
71:e8:06:2f:d0:b8:3d:7d:b5:5b:8a:c5:12:64:8c:
48:4d:11:b4:47:49:4b:4c:09:e0:b5:87:bb:48:27:
a9:ef:aa:ef:d0:97:1d:02:e0:8a:10:52:11:3a:f9:
38:1e:19:4b:19:5d:46:d0:b8:19:87:c7:36:e2:f2:
3b:55:24:d4:9d:e3:c7:33:92:e6:2f:19:11:d5:86:
d0:40:f7:05:19:75:23:b2:98:5b:48:c0:d7:e3:77:
31:f4:7e:0b:82:73:2e:a1:65:90:af:71:69:a1:eb:
b1:24:9c:83:19:56:9a:a4:86:22:0f:be:94:ba:40:
e1:23:2e:10:47:19:29:fc:ad:f2:e4:b8:62:f5:ed:
1b:f3:5f:1c:4f:45:3d:56:5b:b3:47:a9:48:24:9b:
2b:c2:aa:dd:4b:48:a5:78:27:81:ba:7d:f9:21:3e:
68:04:fb:53:97:e5:5f:50:54:c5:27:14:a2:d9:26:
28:a8:4d:10:6a:62:84:b5:c1:09:92:34:9f:4d:d3:
57:7c:a6:e7:ff:c7:f3:54:ec:ca:f4:0b:8c:1b:a9:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:DC:BF:72:4C:DC:33:5D:95:0B:86:79:9D:6C:A2:B1:92:BC:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2766406a-f207-3357-a386-05502b186b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:f6:a2:f2:c1:6c:14:09:80:27:01:df:94:d4:42:13:42:1b:
fe:5a:c2:cd:41:9b:cc:36:4a:ae:67:cd:58:90:37:31:d7:bc:
fb:04:1d:d1:66:e5:9c:f5:ed:36:7b:35:71:0a:e5:c9:5d:8f:
13:ee:a1:7b:78:df:df:d3:f6:5f:7a:51:8e:42:0e:c2:a3:b9:
df:74:cd:81:a4:e6:98:da:49:a3:4b:73:db:77:05:30:e1:30:
e8:ed:9e:f2:87:ca:af:d9:72:12:e0:25:ea:ed:fd:0c:58:66:
e0:7d:f2:1e:39:ac:6a:c0:5a:97:b2:f0:d5:74:57:65:b1:93:
e5:a9:61:25:e8:1c:d4:b3:1a:22:ee:77:79:44:ef:ce:3a:45:
4b:d5:04:45:89:c3:d2:5b:8d:94:96:96:a0:cb:31:eb:cf:ec:
71:27:8e:4c:8a:3b:de:c6:d0:94:49:f8:23:8c:87:75:ac:4d:
05:a3:e9:64:b9:04:95:5d:d0:ed:8f:c9:9e:51:aa:3d:82:02:
7c:2d:a3:c0:2f:8a:b3:79:76:82:38:e4:64:b7:d0:23:c0:c7:
9a:2e:a5:da:67:20:7f:02:1e:13:0f:aa:d9:97:f8:fc:ed:f2:
83:5b:37:0f:fb:7c:e4:30:e4:73:2d:8f:b3:d5:1b:78:0d:c9:
fc:96:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:29 2025 by rpki-client