Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a8cd477-1f27-329f-8235-583f84d7c838.roa
File: 2a8cd477-1f27-329f-8235-583f84d7c838.roa (raw, json)
Hash identifier: UGZ+e2bp0ymEk1pjP5y1KltY7Y6rrB6Fncn15Pbgn74=
Subject key identifier: 57:66:05:B8:C7:15:75:6B:06:65:01:55:4F:CB:4B:A2:90:83:D5:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F14C883BC6E07A1B44196D740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a8cd477-1f27-329f-8235-583f84d7c838.roa
Signing time: Tue 30 Aug 2022 20:45:07 +0000
ROA not before: Tue 30 Aug 2022 20:45:07 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 166.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:14:c8:83:bc:6e:07:a1:b4:41:96:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 30 20:45:07 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=ed3cd665-ba5a-4a3f-ba76-174a1c6d336b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:23:18:b3:f4:29:65:1b:20:5e:e5:f6:80:
d8:04:9b:bb:94:2b:f7:14:cb:32:35:3e:05:71:a4:
76:a6:7f:77:42:aa:ce:87:58:fb:ae:c4:ba:f0:15:
db:2c:9f:69:01:34:71:68:27:8c:01:aa:44:ca:96:
22:79:ec:75:8b:4b:4b:85:98:72:e8:a4:6b:e0:f1:
43:ad:a1:5d:0c:5b:11:71:28:77:41:89:a2:d7:1e:
9e:87:d8:fd:84:4a:eb:2f:a9:e4:be:cd:3b:c9:14:
c5:09:96:5f:83:a9:32:f0:5d:8e:80:e4:84:bf:9d:
b2:74:7e:f7:20:e4:90:44:ce:fc:2d:2a:46:aa:31:
d7:9b:cf:f5:58:3b:0c:ba:e7:87:b2:e9:63:1c:54:
f1:57:86:1b:66:5c:54:86:1d:77:ab:8d:4c:17:d8:
55:22:d9:89:06:a9:16:14:ea:35:d1:35:c4:55:4f:
1e:68:f8:f4:14:ce:13:6b:08:c4:82:5d:b7:a0:48:
2a:08:cf:fb:71:e8:7a:f3:f9:a2:2e:1a:e9:28:e6:
81:fb:61:74:c0:d1:58:d1:38:b2:95:0b:30:38:65:
e9:b2:5e:1a:ce:f1:43:4e:29:e3:7e:01:c2:8d:d2:
c1:02:db:3b:25:f5:e8:3e:db:5f:f5:e8:a4:40:ed:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:05:B8:C7:15:75:6B:06:65:01:55:4F:CB:4B:A2:90:83:D5:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a8cd477-1f27-329f-8235-583f84d7c838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
166.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:73:92:7d:de:eb:11:4e:7b:41:7b:98:9e:dc:f6:d7:2e:3e:
3e:af:32:5c:ac:a1:50:a6:29:86:bb:2a:e2:93:ea:90:b9:06:
c6:28:ed:3e:d1:26:a4:1f:e5:e6:c9:63:c6:8c:b5:75:c6:8a:
de:aa:86:68:fa:a0:69:30:a8:a9:f3:55:24:25:d6:e0:94:d3:
b2:88:5b:ad:f6:21:e8:79:4d:17:de:c4:78:a5:04:3f:b3:75:
55:44:72:9f:54:02:7d:28:ba:89:74:f0:83:6c:2a:45:b7:f0:
87:04:5a:c7:cd:71:e4:3a:a1:af:0f:91:44:ef:7d:7e:99:58:
e5:b9:ef:ca:36:dc:9a:63:5e:79:c0:72:ab:b4:5b:f2:2b:1c:
f7:6d:95:ca:fb:c9:96:86:a3:c9:4d:92:c3:9c:1b:2e:26:2a:
8b:6c:d7:9a:11:97:1b:cc:87:a1:27:4e:31:fc:b7:dc:0d:91:
9b:ae:d1:60:7f:64:46:a9:3f:70:92:50:95:dd:45:ae:14:53:
cd:95:a9:2d:bd:e4:37:4e:bc:22:c0:14:bc:f9:e1:2c:81:7a:
1d:95:c7:5c:33:8b:c9:50:d4:0a:e3:39:e8:69:d4:9e:bd:a3:
86:2c:72:e0:5b:cb:04:ca:73:f3:f8:30:d5:8e:20:97:ee:62:
9d:3d:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:13:53 2025 by rpki-client