Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cbde87d-db76-388b-b664-c24ba3950c89.roa
File: 2cbde87d-db76-388b-b664-c24ba3950c89.roa (raw, json)
Hash identifier: 6zIkJE8HP2sh+my+hFkqYqLO8qurlKlhGd3G4o16Lag=
Subject key identifier: 19:F6:6B:14:C4:1F:14:C9:1C:F9:E9:13:50:49:F2:82:C3:8F:4D:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F66A54E315484F51E682FAC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cbde87d-db76-388b-b664-c24ba3950c89.roa
Signing time: Wed 28 Sep 2022 17:57:08 +0000
ROA not before: Wed 28 Sep 2022 17:57:08 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 8987
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:66:a5:4e:31:54:84:f5:1e:68:2f:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 28 17:57:08 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=a85b5bee-8580-45bb-b3ae-edd6d66257f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:51:a8:20:fc:9e:cf:99:22:d3:8c:44:ca:
2f:5b:a1:67:0f:94:08:1a:66:a2:fa:1e:cb:72:d5:
a9:bd:e9:5d:e0:75:82:65:cd:b5:c7:38:b0:3b:5d:
0b:1d:1c:d2:74:55:3e:e2:7b:c7:21:2d:ff:27:7f:
65:05:2b:f3:65:df:01:a9:19:31:89:fb:77:de:55:
d8:3d:4b:89:47:29:03:dc:7a:ae:8d:8a:81:8f:1e:
d9:55:db:b5:05:78:50:bb:37:01:19:96:23:65:8c:
cb:45:02:fb:67:4e:93:8a:69:ba:a2:99:5b:a9:cf:
10:7c:3a:20:c9:48:bc:51:af:4a:a5:2c:54:71:ad:
43:b0:7e:4b:3b:f1:93:98:3a:9d:3f:1e:75:6c:28:
15:2a:03:ff:f1:33:3a:3e:0c:ed:c2:37:bf:52:c9:
3d:9b:5e:cf:5e:13:d6:e4:d7:fc:2b:b1:0a:de:38:
30:84:2d:19:67:d1:67:54:4e:7e:b2:e7:a1:a0:cf:
02:d5:6d:7f:b1:2b:fe:ec:c0:97:9e:43:69:38:89:
f4:30:0a:52:04:23:aa:3a:ce:38:dd:fe:49:97:66:
76:35:a3:99:91:4f:a2:d9:70:c6:61:39:9a:66:89:
72:d3:02:db:22:60:bb:a3:a7:f3:e3:91:a0:a0:6a:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:6B:14:C4:1F:14:C9:1C:F9:E9:13:50:49:F2:82:C3:8F:4D:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2cbde87d-db76-388b-b664-c24ba3950c89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:d6:68:90:81:94:57:aa:1a:75:01:71:38:28:25:80:b4:cb:
70:68:bc:7f:1e:1f:22:b9:54:fb:ef:33:9e:b7:d9:ab:ae:93:
b6:24:58:30:32:00:b4:16:48:8c:84:39:1e:5f:d0:85:a6:9f:
c3:87:30:e1:a6:3e:90:e8:0f:e2:9f:2a:54:e3:92:c8:41:d9:
e8:85:be:84:0b:a0:f9:1b:90:38:00:1e:47:82:d7:f9:c1:2a:
9d:49:9b:71:59:49:5a:5d:73:9f:7a:72:2f:69:be:c2:59:a5:
e5:41:0b:34:ed:69:98:39:4f:9c:f2:07:fb:43:b2:ab:19:23:
a2:59:b2:6a:ce:ee:1c:74:c9:8b:25:a8:af:05:b3:0d:27:ac:
53:81:d1:15:ae:cd:d2:38:ac:ef:b3:32:4f:eb:6e:27:4a:f2:
bc:55:3b:cf:84:98:0f:fe:7b:89:9f:8d:6b:83:99:29:f4:eb:
89:7b:0f:0b:f2:1a:9f:61:8c:91:a1:de:9e:dc:c8:7d:e6:62:
5e:da:ae:bb:84:44:27:81:d9:4b:76:34:a1:07:60:70:5c:68:
50:66:8e:41:0d:03:f3:1e:61:3a:f9:ed:47:a0:86:65:6d:20:
de:20:a8:e0:40:0c:0a:0c:76:40:62:df:9f:94:74:58:6e:07:
6a:5a:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:45:49 2025 by rpki-client