Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3014173a-8d07-38f9-963c-2ba2ffc3b1b5.roa
File: 3014173a-8d07-38f9-963c-2ba2ffc3b1b5.roa (raw, json)
Hash identifier: RSHYTEMewKQqmXItcMilv+b5fPVoyx1Nw/OhczRhR2g=
Subject key identifier: D2:C1:50:D9:FC:3D:97:26:CF:19:7F:8B:47:DB:36:B8:69:7B:E8:28
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E45705DAAD225D5905C14C4C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3014173a-8d07-38f9-963c-2ba2ffc3b1b5.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:45:70:5d:aa:d2:25:d5:90:5c:14:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=e33f4da4-3275-452f-bba6-78d5faf662e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:98:5a:4f:39:9e:15:27:16:fb:20:08:fc:
2a:c9:a0:f0:ae:87:79:a7:1a:30:e4:26:3d:d4:de:
98:24:b6:f0:c3:83:b4:bf:27:98:d1:5e:e8:70:53:
bb:26:38:49:0c:fc:f5:fd:04:d0:7a:46:2c:1c:cb:
53:34:b2:bb:ae:4e:e7:17:3b:51:c6:18:0d:02:d8:
e6:6f:24:2e:c1:d3:dc:c9:1e:5b:4e:8e:1b:25:e9:
69:3a:f7:7a:ef:d0:60:42:00:7d:41:2e:7d:1e:40:
11:cf:ef:9a:23:55:26:d4:e9:88:62:07:9d:59:a0:
c7:96:8f:5c:81:c9:18:1b:5e:35:f8:08:47:bf:11:
9d:31:22:21:ba:fd:66:22:ad:b7:03:7f:a6:6a:f0:
51:21:e6:6b:c6:da:42:04:de:c8:e8:34:d6:e5:f4:
4e:ce:5d:8a:5b:06:f5:ea:f4:c8:2f:95:c4:e9:f9:
3a:0d:e0:3a:b6:9c:85:45:72:79:ad:b2:db:e2:10:
0e:d4:88:34:d3:f9:8b:1e:c6:5d:d6:e5:c2:ef:f6:
34:66:09:8b:7b:f4:92:18:f2:cf:bc:b0:58:5b:dd:
24:bd:72:96:7c:83:4c:bf:cd:94:9a:e6:40:a6:56:
00:48:b0:50:25:b3:dc:65:34:a7:cb:10:b1:c0:04:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:50:D9:FC:3D:97:26:CF:19:7F:8B:47:DB:36:B8:69:7B:E8:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3014173a-8d07-38f9-963c-2ba2ffc3b1b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:32:ab:68:f4:ef:45:2e:1d:3f:dc:ab:06:45:19:5f:4e:36:
1d:b5:4c:c2:49:6e:fc:28:a2:d4:0b:cc:7e:66:8b:f2:32:9e:
5b:79:ab:d3:01:39:ac:bb:10:41:b6:49:d8:07:01:73:e0:b9:
11:2b:53:95:94:21:52:50:b1:51:0e:3c:c0:0e:79:e4:59:4a:
c0:4e:ca:29:69:5b:c0:b5:85:b6:57:e7:96:32:d1:b5:75:03:
74:ff:7d:6e:82:b9:15:93:d0:3b:9f:68:d5:d7:e9:eb:4d:a9:
5c:62:6c:72:a5:dd:25:4d:98:93:e8:6d:67:c3:00:0a:a4:f1:
d9:fd:66:f6:38:b2:9e:fa:00:11:da:d5:94:6b:18:3b:36:42:
0e:a2:88:e9:e4:6e:29:8c:a2:9d:6c:53:03:69:81:53:57:67:
3f:1d:3f:9f:cc:c5:ed:b7:57:0f:d5:1e:03:89:89:4d:2c:ba:
33:98:ac:c7:bb:2a:5a:3f:ef:f9:63:37:08:1b:7d:34:33:71:
f9:fe:ce:f5:e5:f4:de:6e:ed:84:9c:3f:f1:3b:b3:ec:ff:dd:
a0:50:86:f4:48:29:be:49:8e:6b:ee:8a:f6:3e:b7:93:1e:f0:
3f:27:89:1d:0b:a6:ad:a8:79:82:aa:09:e3:53:01:d3:03:05:
15:25:9b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:28 2025 by rpki-client