Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a5c8e7d-2c9f-336a-80fe-f3e2e3d345f1.roa
File: 2a5c8e7d-2c9f-336a-80fe-f3e2e3d345f1.roa (raw, json)
Hash identifier: 7BWFUdeuB4pwbXhFoJFmfsp3mn5BfzZQoAnKruLGRTI=
Subject key identifier: 08:26:FB:B1:EB:83:3E:2D:9D:4F:F7:3A:F1:59:EC:73:27:D8:6D:03
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C80BE37F70526FA3D55310E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a5c8e7d-2c9f-336a-80fe-f3e2e3d345f1.roa
Signing time: Thu 06 Jan 2022 05:00:00 +0000
ROA not before: Thu 06 Jan 2022 05:00:00 +0000
ROA not after: Thu 10 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:80:be:37:f7:05:26:fa:3d:55:31:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 6 05:00:00 2022 GMT
Not After : Feb 10 05:00:00 2022 GMT
Subject: CN=23b44367-314a-4ea6-ba26-6ca994e3fdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:95:7b:dc:6f:8a:e6:00:fa:10:d3:9e:49:
4e:5f:42:a8:1e:be:42:67:5b:2a:f6:4e:b1:a9:54:
be:d8:2e:ec:2c:d1:64:3b:67:9e:a8:b2:66:e6:8d:
e8:a1:db:8a:a9:0e:94:33:bd:41:55:00:44:f2:9b:
eb:20:33:ff:ce:77:c1:7d:10:d1:22:ea:68:1f:ea:
04:bd:ec:1c:ac:27:bb:7d:e5:5c:3b:4e:38:7f:11:
d6:dc:be:ac:76:b6:c6:08:c6:04:ca:a2:b6:3b:e3:
c4:f3:78:ad:b2:4d:b5:dc:6e:ac:57:9d:f2:40:d8:
be:5e:a3:e2:61:15:e1:5e:f0:5e:85:0c:57:83:c0:
3b:f9:0a:05:b9:e2:c8:89:0b:a3:10:3c:af:44:9e:
bf:b8:bf:47:d7:c8:e3:04:76:30:bb:78:79:16:cb:
72:2c:52:84:44:2c:9a:ad:e1:7f:95:5f:da:30:30:
26:5d:2e:d2:23:65:bd:a5:95:d6:4f:07:b9:b3:9a:
e1:b3:19:bb:95:61:65:11:5b:e2:4f:cd:2a:c8:87:
f3:c5:72:78:83:dd:47:49:e1:55:4c:58:e8:4e:e4:
fe:9c:60:08:76:a0:0c:36:5f:63:cc:a1:5b:c2:0b:
06:3b:ec:29:3d:c9:db:53:9f:87:dc:bd:82:d2:f6:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:FB:B1:EB:83:3E:2D:9D:4F:F7:3A:F1:59:EC:73:27:D8:6D:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a5c8e7d-2c9f-336a-80fe-f3e2e3d345f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:78:d3:1b:18:da:c9:73:a2:83:93:3d:7e:01:36:58:0c:f3:
1c:0b:e2:e1:82:44:ad:80:c1:c3:61:53:3f:1a:39:ec:84:23:
94:e2:7e:3c:24:05:60:c7:88:d8:b9:d2:88:70:ef:87:34:84:
52:2d:5a:de:b8:c3:6c:6d:bd:3d:55:bc:cc:c9:5b:ac:b8:d0:
c6:fc:57:85:c4:35:fa:74:64:f7:84:aa:19:9a:6d:34:ef:c2:
ec:39:5a:bd:fc:b4:62:8e:dc:75:66:d2:73:f5:77:e1:02:4f:
92:25:3e:4c:3b:c6:26:46:e8:91:a4:ec:f6:36:77:36:25:ba:
1b:1b:c3:a6:6d:ab:e9:c2:64:cf:eb:5b:5f:45:77:ca:c7:b4:
8d:98:38:e5:53:71:30:92:a9:b2:ef:6d:5b:56:84:c9:e9:81:
bf:8a:e2:c1:6d:0a:40:25:5f:38:ad:9e:96:7e:cd:c4:cc:26:
8e:69:1d:9c:9c:58:04:bd:35:db:9f:85:1b:87:0a:bc:5d:45:
2b:6f:16:73:52:e4:99:b7:be:98:4a:73:c4:91:35:17:2a:74:
55:97:3d:17:b8:bd:83:d8:d0:d8:61:53:72:cf:a2:07:46:68:
9e:25:ca:1a:e4:ad:f2:cf:e9:64:60:29:0e:34:29:71:78:cc:
e0:fa:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:53 2025 by rpki-client