Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33adb83c-c1a5-3ec3-937e-08f4835adb43.roa
File: 33adb83c-c1a5-3ec3-937e-08f4835adb43.roa (raw, json)
Hash identifier: DrWF+z5kTzv6yBuyRLVNbOrsVbM8ZtGU8vtikqwQ8uw=
Subject key identifier: E7:ED:E8:02:CC:F7:2A:FE:D2:81:E9:2E:B3:A0:1C:4C:08:C0:25:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840745A78F0FFD787CFA2B8D000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33adb83c-c1a5-3ec3-937e-08f4835adb43.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 149.186.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:74:5a:78:f0:ff:d7:87:cf:a2:b8:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=b90619b2-4596-4bf7-8407-100036c53a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:a8:c2:bb:60:de:30:4c:8d:58:36:9b:f9:
13:33:59:9a:77:e7:d8:6c:e8:f3:19:ee:32:4c:df:
1c:01:de:bb:81:fc:ca:34:08:fa:59:30:22:37:3a:
39:d3:e4:35:67:36:f6:98:6b:89:94:a5:95:dc:a6:
75:18:ef:ca:76:45:2d:79:62:20:40:32:55:c0:3b:
31:fe:d6:38:71:f7:40:6e:21:56:ad:6d:b7:f4:d4:
92:49:f1:15:2d:6f:10:97:6c:29:7d:8f:3d:3b:39:
35:e7:11:59:dc:16:a6:9b:c9:3c:70:32:c0:ea:0a:
47:20:44:ce:48:11:99:d4:f0:c5:13:e1:cb:5c:c9:
78:8a:7d:9f:6d:f1:f1:83:22:f1:52:b4:6b:6f:c0:
19:97:5a:f2:c9:52:25:07:0c:14:ce:79:04:2e:28:
5e:45:07:da:ab:23:cc:40:9d:29:5f:dc:8f:65:b7:
38:95:d2:82:28:c9:9a:51:0b:63:d7:27:c4:a5:f7:
b8:4a:6f:ac:ec:e6:8c:3c:ea:95:a8:d7:50:65:71:
14:1a:9e:54:68:7f:c5:9c:4a:c5:1b:bf:89:1a:13:
42:95:5e:b9:4b:0e:df:de:11:4a:18:ba:42:d1:bd:
87:41:67:7d:3d:f6:99:4f:61:19:3e:01:2f:fd:b6:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:E8:02:CC:F7:2A:FE:D2:81:E9:2E:B3:A0:1C:4C:08:C0:25:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33adb83c-c1a5-3ec3-937e-08f4835adb43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d0:49:63:4e:1b:68:f8:9c:8b:f1:75:ab:65:1b:b4:63:12:
20:76:e3:01:c0:ff:86:99:a1:d3:af:46:7c:93:88:5b:7b:a0:
26:42:a4:a9:ad:38:12:b8:fd:8e:05:ae:c6:f0:f6:f0:32:d4:
58:eb:ee:cd:a3:44:5b:4b:b1:c8:b3:99:43:37:95:d3:38:44:
5d:30:71:e4:8c:f6:57:b2:fc:2e:50:5b:4e:70:0d:50:35:e9:
10:ac:7c:b2:69:07:9c:43:bb:45:d5:c1:c7:ae:4a:89:e0:40:
b9:de:7d:06:1d:1c:e4:94:e6:ba:71:01:42:50:2b:df:b6:6e:
ea:47:fa:2d:38:92:f0:3c:b2:be:98:9d:e5:94:bf:27:5f:01:
af:9a:24:23:72:de:1c:d5:48:ea:59:c2:5a:29:9e:7e:21:08:
6f:85:61:dc:2e:f3:34:07:82:7e:db:86:ad:58:60:b6:8a:a2:
84:b7:e5:70:32:bc:5f:c4:c4:4e:80:4b:48:7e:fb:f4:6e:68:
ae:54:35:49:a7:55:90:53:6d:df:55:af:a0:45:27:33:ea:40:
5e:c5:9f:74:37:22:20:e8:26:71:ce:bf:a8:42:b9:e7:07:57:
89:c1:b5:d5:26:27:51:56:e2:eb:ff:4f:2d:fb:45:85:c6:0e:
f9:cf:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:17 2025 by rpki-client