Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ae1244b-679c-3e2c-84e6-5d2664d497d1.roa
File: 2ae1244b-679c-3e2c-84e6-5d2664d497d1.roa (raw, json)
Hash identifier: 4n9/ta/HFPBH5NSoJh8YJRLAuZrjl/JMwrlfqdYHfYw=
Subject key identifier: 01:86:9E:C5:20:C3:A6:8B:CF:1A:B9:E4:AF:87:DE:6E:81:50:87:17
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584067838F25679540402A1B2B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ae1244b-679c-3e2c-84e6-5d2664d497d1.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 167.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:83:8f:25:67:95:40:40:2a:1b:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=4e18bf8e-c44c-4764-ac0e-c18fb1c2c652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:90:58:89:db:0b:f5:73:d3:55:39:d7:3f:
cf:59:ed:6a:d7:e9:60:93:b3:ba:31:f2:d7:ca:2d:
c1:93:66:2e:5a:15:28:b8:c0:07:86:fc:a8:d2:d1:
95:40:65:51:49:bf:e4:81:a3:27:cd:64:30:58:aa:
6e:41:ef:8d:c4:de:de:a6:7b:a9:e9:50:fc:08:99:
c8:32:64:84:1c:ca:71:a3:68:07:3a:5e:ca:ab:34:
9c:0f:99:95:71:97:5e:05:a9:e1:a7:b1:bd:d7:0f:
15:89:ed:4d:ea:e7:97:d9:30:2c:36:92:72:4b:db:
ac:36:e5:ed:45:25:a9:b1:8d:42:a1:c6:03:f5:bd:
eb:8e:fa:36:f1:f9:61:16:f0:97:9d:ba:cd:8e:a9:
47:ea:ee:b2:fc:a5:5d:b0:4d:f5:c1:f8:d4:85:15:
72:b1:ca:47:e2:34:80:ac:07:1f:6e:01:11:10:d1:
fb:2a:1a:94:b7:05:f2:48:f7:25:74:a8:5e:f1:a5:
29:84:83:a8:90:ce:b5:2a:93:11:7a:73:e3:c3:e7:
d2:5d:e1:bb:9c:02:e0:01:c9:65:d9:bf:8d:3b:fe:
e8:82:3c:5e:cb:6d:f2:7e:c0:fa:63:ae:86:8a:2f:
e2:81:00:da:14:57:db:14:c6:77:72:a3:9e:27:0d:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:86:9E:C5:20:C3:A6:8B:CF:1A:B9:E4:AF:87:DE:6E:81:50:87:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ae1244b-679c-3e2c-84e6-5d2664d497d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:28:63:19:97:8f:26:21:f5:0a:55:af:92:cd:9d:c1:3f:ec:
39:da:00:13:62:b0:8a:c1:0a:a7:2e:43:39:2b:16:52:7c:63:
8d:5a:72:5f:6f:40:22:39:43:fe:2e:74:32:dd:81:58:ac:76:
20:c4:db:63:19:7b:40:d1:67:30:91:22:c6:2e:68:ba:d2:4f:
b9:36:fc:44:b2:08:6c:0c:60:99:aa:93:4d:e0:bc:c7:fe:ba:
b4:2c:a9:f4:f7:1c:b9:77:41:af:59:31:c4:97:17:4e:c2:e2:
fc:fc:6c:0d:e7:e1:25:c3:1d:4a:66:c7:dc:80:cb:3d:ca:4e:
7b:29:a7:2a:f4:bd:f8:e9:52:95:a0:e5:42:cd:5c:bf:11:36:
14:d0:a0:8a:4b:2d:35:b8:90:61:29:e8:74:61:b9:a8:e8:26:
6b:9f:7c:fa:cb:df:97:97:a8:e3:49:ce:d9:27:6f:70:76:39:
d5:00:1d:12:cf:71:a7:84:ff:d4:24:95:15:81:f0:ec:57:e2:
6a:a6:c2:75:16:96:35:23:f7:37:6b:19:e6:7d:62:69:d1:e9:
17:1b:23:8c:12:f0:2b:fa:ce:bb:4f:5b:db:bc:5e:31:d9:f6:
69:ef:b6:4a:bb:9c:e1:69:4a:de:11:d0:e1:2f:36:9f:19:da:
70:ed:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:06 2025 by rpki-client