Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a950c22-be87-3986-865e-69f30a70841f.roa
File: 2a950c22-be87-3986-865e-69f30a70841f.roa (raw, json)
Hash identifier: BOO+nv02sYgK3NltimKJ+M0f1uMtc8sinODZsAreK1A=
Subject key identifier: B8:DA:2B:DD:2E:4A:A8:05:C2:F3:6D:48:1C:3E:E8:9E:38:E4:79:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD8F62D9EA944D28A4CBC6D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a950c22-be87-3986-865e-69f30a70841f.roa
Signing time: Tue 08 Nov 2022 12:00:00 +0000
ROA not before: Tue 08 Nov 2022 12:00:00 +0000
ROA not after: Wed 14 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 170.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d8:f6:2d:9e:a9:44:d2:8a:4c:bc:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 8 12:00:00 2022 GMT
Not After : Dec 14 05:00:00 2022 GMT
Subject: CN=2b42673a-9804-4f3f-a9e0-65d270719670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:2b:a7:66:55:82:58:23:2d:94:dd:10:19:
77:5a:a7:c6:12:b6:af:ca:49:93:43:3b:1c:b3:d3:
64:4e:30:c4:7c:ee:cc:9e:bc:73:cd:2c:23:fd:1f:
cc:54:82:02:ae:ba:fa:fb:75:d1:25:8d:6c:32:29:
b4:28:7a:56:b7:bd:41:1a:3f:00:aa:b4:2f:e9:c1:
b9:0c:ea:bb:2f:39:7c:98:31:2c:a3:5e:e8:e3:36:
1f:93:a8:a9:5a:be:87:2f:30:8d:26:71:30:a4:f8:
12:7a:60:e3:84:d1:d2:5e:e7:b1:4e:2c:9e:6d:20:
63:28:02:f5:bc:a7:74:a5:0e:82:ba:44:b1:50:c3:
5a:77:e7:d9:6a:fa:18:ec:26:18:22:3d:92:37:59:
c4:5c:c7:05:8b:71:6b:5f:8c:91:a4:c9:b8:5e:a0:
6d:ae:20:60:80:8a:21:a2:e0:c0:d3:9b:f9:2c:5f:
f5:d2:66:4d:4c:3d:58:fe:11:3d:10:c7:28:d8:fc:
a6:35:e1:b9:34:1c:b2:54:84:77:81:62:18:67:fc:
e8:a9:c6:ec:73:ee:1c:62:99:21:0b:a0:26:c8:0c:
4a:75:cc:ee:af:5e:da:e1:f3:62:d7:ca:0b:e9:a7:
9a:44:89:84:d3:d6:c2:02:85:a8:cc:39:ff:e0:a8:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DA:2B:DD:2E:4A:A8:05:C2:F3:6D:48:1C:3E:E8:9E:38:E4:79:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a950c22-be87-3986-865e-69f30a70841f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:b0:c1:70:1a:1e:2d:99:2f:b6:78:df:56:58:66:6e:91:ed:
d5:56:57:17:b4:cf:06:32:38:55:63:e2:aa:b1:46:20:3c:92:
1c:2c:81:7c:3f:5b:3c:b1:6c:e9:44:f1:aa:ac:f8:ee:70:70:
73:89:28:ba:1a:cb:89:08:12:5c:9e:0b:a2:ca:b0:37:84:55:
13:79:30:74:48:13:a3:5d:00:b3:39:9d:26:2d:2c:79:89:e4:
fa:ea:72:f9:0e:9c:fc:6d:a9:85:fe:da:b1:77:54:89:9d:47:
4b:15:81:d2:84:51:93:d5:fd:cb:1a:7a:e6:03:f2:7f:19:d3:
11:31:5e:50:bb:70:8a:3c:6f:9a:e6:1c:7c:1e:12:7d:8a:f7:
03:6d:f6:b2:28:a3:c1:b7:15:fc:eb:38:b8:29:b9:07:48:a3:
f1:44:bb:eb:4c:ce:d3:08:5f:02:0c:5a:c7:c1:0e:66:7b:a8:
cf:ef:91:48:e7:e3:09:5a:e1:49:31:f1:06:30:25:0e:77:1e:
64:fc:6a:75:1b:b0:e7:ce:ce:0b:ee:5c:c2:d4:20:3a:ad:08:
e9:cf:41:93:02:78:a2:e9:07:52:b9:b5:53:b6:e7:5a:b8:7f:
d9:f7:4f:44:c3:ed:08:ef:b8:16:3e:3c:0a:45:4e:d5:cd:b4:
89:fd:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:56 2025 by rpki-client