Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2af6f47f-ce08-30c0-b926-abb7f40dc083.roa
File: 2af6f47f-ce08-30c0-b926-abb7f40dc083.roa (raw, json)
Hash identifier: rWLMp9qP6ogor3dh/Ww+4r6lH9ETKnP5Ve+0vlah7iA=
Subject key identifier: E7:FF:17:09:4B:28:59:A9:23:E9:DC:CF:5B:F8:D8:93:06:13:BE:7C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405678F6E03F7F4B8742620400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2af6f47f-ce08-30c0-b926-abb7f40dc083.roa
Signing time: Fri 23 Dec 2022 12:00:00 +0000
ROA not before: Fri 23 Dec 2022 12:00:00 +0000
ROA not after: Sat 28 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 149.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:56:78:f6:e0:3f:7f:4b:87:42:62:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 23 12:00:00 2022 GMT
Not After : Jan 28 05:00:00 2023 GMT
Subject: CN=e81baf65-03d0-4a19-9c96-70ed6089c817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:16:5c:9a:f9:5c:72:b7:e2:47:33:25:0a:
84:e5:8a:db:25:25:7c:aa:f3:ff:18:da:45:82:49:
2f:7c:df:97:2e:d7:c8:f7:fe:17:4d:d0:75:01:3a:
64:07:4d:28:c5:59:26:88:b8:58:32:40:37:85:98:
ae:b4:fd:da:a2:e5:d5:09:e3:e5:b3:73:39:a7:8e:
80:18:d1:37:cc:73:2f:b3:01:9a:8b:fe:c8:60:4a:
a6:52:4d:85:8f:a5:7f:c8:13:bf:8e:88:76:2b:9d:
e8:ac:8a:52:bc:6c:01:fd:96:c9:f3:73:5f:9e:d0:
55:dc:6c:34:44:4b:04:14:a1:1e:6e:9a:97:9c:42:
30:bd:a3:df:d4:d4:3c:c0:79:a4:8e:fe:04:04:4f:
f5:de:3b:c5:5e:4c:11:cb:b2:cc:da:4a:6e:47:ab:
b5:13:db:3d:1e:b7:6a:54:b5:8a:46:0d:3f:b7:83:
01:d1:b3:42:74:81:f8:03:51:02:ad:e9:d6:bb:a0:
03:46:ed:81:79:03:bf:28:13:8b:11:dc:78:32:28:
29:20:fa:89:05:7f:35:4c:3a:c5:5f:c2:02:02:b7:
4c:91:f1:55:f1:3e:75:fc:a1:34:12:27:19:96:eb:
44:cc:32:59:ea:71:ea:02:e8:d0:f1:a4:b7:9a:a3:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FF:17:09:4B:28:59:A9:23:E9:DC:CF:5B:F8:D8:93:06:13:BE:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2af6f47f-ce08-30c0-b926-abb7f40dc083.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c1:07:47:ba:4f:0c:57:c0:40:22:49:3c:49:44:3c:cc:7c:
8c:5a:f1:5b:f1:82:c8:ed:c9:14:cb:89:2b:06:00:30:10:df:
1d:05:9b:e3:43:15:fb:38:18:44:b1:cc:a1:15:03:ad:a2:9f:
3a:e7:72:64:da:d0:ba:bd:b9:59:c5:2a:23:62:00:19:89:89:
6c:bb:bd:d5:18:84:75:6e:e1:4f:b5:29:7e:88:97:f3:e1:36:
76:03:b0:52:85:b5:08:58:a3:47:46:19:87:5d:aa:c7:ea:e0:
1c:0d:ff:1e:35:70:90:50:68:58:04:cb:39:45:da:20:63:8c:
43:cd:ab:40:de:49:d6:7a:7a:1a:42:f3:d4:ab:86:d6:1b:78:
75:ac:0d:60:1a:c2:f8:e3:ff:ac:8a:3e:56:2c:a1:a3:f6:0a:
81:34:b7:b0:81:85:a1:65:9e:aa:ad:68:ca:6e:5c:e9:5f:b5:
6d:32:00:62:4b:89:c9:2e:5d:ae:97:47:e6:71:62:3b:8c:aa:
d0:53:1e:98:0f:a3:ee:a2:76:d1:34:b2:c3:6d:69:8e:94:54:
b3:d4:d2:77:da:46:2b:dd:e8:78:7c:03:7b:cd:a0:ba:60:4f:
3d:28:c7:72:25:99:40:93:4d:94:22:39:90:65:b4:8f:dd:08:
62:42:17:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:11 2025 by rpki-client