Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29d18529-8046-343c-9665-680bc5cf08e0.roa
File: 29d18529-8046-343c-9665-680bc5cf08e0.roa (raw, json)
Hash identifier: CON9fEP6sMdQqPFYwNzffasJgScjAgApKqmCWlmdads=
Subject key identifier: 06:CF:B4:64:5B:1E:5E:09:42:CB:C1:6E:50:A0:97:DA:23:FF:F5:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EA15CD96E151EEB3AA6FB4880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29d18529-8046-343c-9665-680bc5cf08e0.roa
Signing time: Tue 19 Jul 2022 12:00:00 +0000
ROA not before: Tue 19 Jul 2022 12:00:00 +0000
ROA not after: Wed 24 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a1:5c:d9:6e:15:1e:eb:3a:a6:fb:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 19 12:00:00 2022 GMT
Not After : Aug 24 04:00:00 2022 GMT
Subject: CN=125c432e-bf15-4ad7-bdad-816db623a0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:2a:2e:ff:d7:99:93:dc:4b:65:e3:34:11:
e0:53:87:54:71:f1:ff:71:d1:b9:01:70:74:4a:d4:
a8:f4:34:5c:ec:38:9a:ed:0b:f7:86:53:89:6a:bc:
7c:1e:30:a2:4d:38:55:93:83:1d:aa:8c:53:cf:73:
db:0e:a5:10:1a:43:77:20:8f:8c:56:6f:bd:44:bf:
06:fb:70:98:90:fb:c9:f2:55:44:67:15:ac:3e:8b:
a1:9c:78:5b:a3:84:2c:70:fd:bb:c6:3f:15:b9:2a:
c8:1a:80:5b:2a:48:8b:02:e7:59:8d:5c:dd:d4:97:
2d:88:ad:d8:e9:ed:ce:ab:ac:10:28:8f:33:26:ba:
4b:e1:ee:5e:84:80:e0:df:c1:c4:71:8f:d6:66:ff:
f7:6a:e1:78:97:4f:d4:0c:cb:32:22:bc:2b:fc:f1:
8e:ea:67:b3:c3:b0:a0:44:43:e5:87:10:a7:c7:3c:
6c:58:15:95:47:65:c5:94:9c:e7:24:72:6b:45:3b:
ce:f4:45:21:df:cb:b0:90:7f:8c:9c:85:c8:55:52:
95:fb:2c:55:a0:04:fb:80:27:2f:8d:0e:3b:94:66:
a6:ab:a5:c8:fb:a2:82:8a:42:c5:72:42:df:72:30:
15:80:da:9c:94:98:f0:18:6c:0d:53:c9:00:75:5b:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CF:B4:64:5B:1E:5E:09:42:CB:C1:6E:50:A0:97:DA:23:FF:F5:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29d18529-8046-343c-9665-680bc5cf08e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:45:eb:c2:29:16:f5:c9:a7:d4:6b:88:30:85:bd:03:e5:30:
92:08:73:c1:b5:20:75:36:1f:f8:4e:68:15:fe:20:96:39:2c:
df:80:16:94:ab:14:35:fa:f4:f9:4d:58:24:26:78:ea:f5:f1:
bf:f5:e7:2a:e9:b1:4f:c5:5f:44:40:81:0e:8e:68:ba:24:81:
26:f4:7a:52:a2:3e:a5:43:46:92:57:cb:0b:44:6a:9e:63:a1:
12:ec:8d:13:46:41:7f:37:af:9b:fd:70:7b:64:35:58:a0:b6:
4d:7e:27:ec:9d:f5:c8:c7:30:d9:c2:eb:c5:5f:0f:1c:93:db:
8b:d7:59:b5:5d:cf:e1:b4:ac:c2:95:1b:f0:40:92:b8:55:fc:
c7:cb:be:95:7a:e7:48:23:fd:2b:d9:98:8f:6e:52:8f:4c:4a:
1b:16:6c:70:ef:d5:54:67:5b:65:33:19:6c:95:b7:78:03:14:
fc:50:d2:8e:07:71:d3:85:37:7d:0e:67:0d:79:a2:0e:41:49:
a1:bc:d5:b1:91:a4:e4:d5:69:52:c4:9f:78:35:19:87:bc:5e:
cd:ce:36:2e:b1:d8:f5:d9:4a:4f:7c:eb:b6:35:ce:2f:46:e0:
fa:99:38:6e:6d:6d:5e:fa:08:b5:5b:bd:89:63:fd:d1:69:08:
e4:7f:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:46:28 2025 by rpki-client