Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3206f2e0-9e43-3db1-a101-a3900329b530.roa
File: 3206f2e0-9e43-3db1-a101-a3900329b530.roa (raw, json)
Hash identifier: iyEw3LxtyFhMmxaC+eEyOx38cUKAiIR0FiuAmje7lxw=
Subject key identifier: 1F:12:F8:2B:AD:58:86:53:D3:A5:B8:01:46:58:D3:B0:B1:54:CE:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81C1EFC431D5A3534894EF40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3206f2e0-9e43-3db1-a101-a3900329b530.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 161.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:c1:ef:c4:31:d5:a3:53:48:94:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=21ee5da2-1718-4d50-a7ca-eed47f6fe468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:bb:6d:8f:13:f2:f1:ab:c9:e9:7d:8a:4a:
72:f8:3a:3c:cc:53:bd:1c:1b:e4:c6:b5:cd:8a:29:
5e:8a:8f:9b:72:2c:51:33:dd:b8:97:96:b8:af:b6:
2c:e2:16:38:b8:ab:d9:b4:3a:9c:f0:37:93:6f:6c:
8e:a2:5d:be:ed:fe:e0:fc:78:7b:52:52:7b:41:be:
e4:27:04:b7:b9:45:d3:57:5b:79:a3:90:d5:82:bc:
e0:55:65:f7:6f:d2:c1:cd:b4:74:f5:a2:c0:e7:9a:
f7:56:b9:04:d5:78:b6:c6:90:1d:db:5f:d0:96:6e:
62:57:b3:9a:8a:fe:ae:34:56:5b:6e:89:af:09:c9:
18:00:3b:7d:4e:60:31:bb:80:42:a7:0d:bb:3f:ef:
a3:85:0f:f6:3d:ff:f3:d0:4d:14:d2:5e:4f:96:da:
49:da:bf:37:00:b5:57:56:ee:c1:a1:03:5b:a8:a1:
d8:9c:4d:25:95:ff:15:55:81:d8:14:e5:bd:5d:5b:
ef:76:6c:f1:8b:92:58:17:e6:e2:9e:6f:65:b7:f2:
80:86:45:13:62:c4:cd:38:ab:8b:a5:47:83:2e:77:
04:ae:37:b8:4f:76:0d:76:07:c2:0d:0c:3d:03:d2:
18:3d:7e:91:66:b1:33:e1:ba:7f:94:a4:62:e1:69:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:12:F8:2B:AD:58:86:53:D3:A5:B8:01:46:58:D3:B0:B1:54:CE:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3206f2e0-9e43-3db1-a101-a3900329b530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:10:0c:d1:63:a4:e0:17:2d:05:b7:c1:7e:c4:7e:b9:3d:b6:
ac:b7:51:6b:b5:4d:ef:c1:4c:cb:c9:c0:ac:49:d9:a5:dc:e5:
90:50:eb:04:a6:94:3d:83:58:d8:f9:d7:1a:ea:85:d6:4e:71:
1b:64:7f:69:07:58:78:04:1d:ea:fc:b0:c8:a5:d9:9f:37:ae:
77:a5:e0:d1:1c:ec:45:4e:8b:4d:c9:42:63:d5:44:42:55:b8:
c5:11:11:45:fe:f2:29:dc:56:4e:f1:74:c0:2c:54:58:5c:29:
42:e1:e9:d3:51:33:be:c8:82:1e:68:70:c1:ad:3c:58:bb:e3:
dc:03:c1:d8:5d:57:dd:67:4c:57:15:bd:21:bf:44:cf:02:1d:
9c:ef:06:cb:39:63:2d:00:e8:bc:66:19:a6:de:79:73:87:98:
66:a0:75:ac:9c:1d:21:25:17:1e:9f:c9:83:81:d7:c8:70:9c:
5e:b6:40:32:60:b5:21:cb:55:64:1b:33:66:6e:1e:bb:d6:7e:
20:cd:30:b2:6d:cf:72:2a:09:77:0f:5a:47:00:fb:6d:12:5d:
0d:d4:bc:7d:bd:65:3e:3f:3d:a8:c9:bf:fb:ad:f9:53:d5:16:
c3:97:86:15:08:67:54:c4:6b:2e:bb:ae:55:15:e2:4e:2e:18:
83:81:72:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:05 2025 by rpki-client