Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3428ac68-89d4-331f-ae3a-bce853f8b3db.roa
File: 3428ac68-89d4-331f-ae3a-bce853f8b3db.roa (raw, json)
Hash identifier: 4lwPHKbtXujHqJExyW0KUPK3tAlqpBtRWIKHmGVp5m0=
Subject key identifier: C7:F6:DA:F8:7D:A0:0C:F4:2B:20:2E:46:6C:0A:33:3C:AF:F9:4F:06
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE6EB858DBF665D01BAF37C50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3428ac68-89d4-331f-ae3a-bce853f8b3db.roa
Signing time: Sun 13 Nov 2022 12:00:00 +0000
ROA not before: Sun 13 Nov 2022 12:00:00 +0000
ROA not after: Mon 19 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 168.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e6:eb:85:8d:bf:66:5d:01:ba:f3:7c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 13 12:00:00 2022 GMT
Not After : Dec 19 05:00:00 2022 GMT
Subject: CN=2f8efc4d-9a44-4665-97ce-cf2e51e2fb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:55:19:3f:10:71:d6:64:0f:75:9e:35:df:
3f:3c:12:eb:7a:27:25:8c:c4:92:17:c2:e6:dd:7d:
ea:00:dd:c8:72:34:dd:70:a8:fc:23:34:63:3c:45:
b6:e3:65:f4:9b:2b:e5:74:30:98:a8:d3:fc:16:e3:
35:b0:ed:af:50:28:69:33:dd:bd:a4:48:c8:00:f3:
23:dd:ad:b3:06:7a:53:b7:4a:90:3c:89:b8:cf:b2:
12:69:f4:40:1a:2e:ab:59:ac:d2:9c:f1:32:e0:ce:
a0:a4:17:c0:31:8b:d6:3c:e6:08:76:29:65:6d:97:
74:c2:49:d9:0c:56:d0:93:ff:12:b5:de:ad:d6:0f:
45:0e:62:30:00:5e:73:ce:a0:e6:8f:5a:28:98:55:
5d:2b:87:29:94:70:d0:47:be:5b:ea:c5:9b:f2:ef:
c7:2a:bc:0c:cb:64:90:de:46:84:97:f8:7d:73:d2:
31:14:93:e6:29:31:5c:15:ba:68:82:26:94:e1:e5:
70:00:ff:92:88:e5:cb:28:32:7e:96:c9:14:39:0d:
a3:94:e7:d6:9a:cd:e6:2f:e7:88:51:2a:74:71:34:
e9:b0:f6:e9:f0:5f:eb:68:13:14:cf:b3:44:12:9a:
a5:ae:71:eb:34:79:cb:3a:29:92:e1:eb:ef:c0:68:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F6:DA:F8:7D:A0:0C:F4:2B:20:2E:46:6C:0A:33:3C:AF:F9:4F:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3428ac68-89d4-331f-ae3a-bce853f8b3db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:7d:81:5f:00:e1:58:f8:28:aa:b5:e9:2b:fe:af:f4:4f:fd:
33:c8:74:c2:ab:1a:b7:ad:26:7e:ba:e2:9d:98:be:00:67:ae:
7b:03:53:26:0f:e3:92:56:04:ab:24:90:7e:b8:e6:0d:c7:09:
76:25:23:39:d4:e8:db:31:07:12:35:70:8d:62:7f:28:58:4f:
21:ab:98:c1:64:63:9e:6d:c2:5c:dc:19:ab:31:db:2d:92:1c:
4a:28:3a:ae:03:93:08:3e:70:93:c2:66:f4:60:14:9d:aa:a4:
0e:b9:8f:72:07:9b:a3:a2:7b:0b:5e:0d:51:94:71:b2:a3:a0:
6f:b7:03:16:62:91:ee:a6:51:33:be:04:bf:45:1e:01:00:07:
ee:c4:6a:e1:c5:18:2e:8f:a2:b2:00:70:96:cd:42:77:e5:e5:
3f:69:3b:fc:57:e7:1d:d8:37:6e:05:d7:94:a9:21:81:24:37:
c4:4f:9e:13:e8:1b:a3:88:d7:6b:dc:af:81:f7:c2:88:45:ca:
7c:10:7a:2c:cf:b8:bd:c5:bf:d9:c0:c8:9d:9b:43:1a:1a:2f:
da:9c:e3:12:db:55:de:80:d7:10:51:8e:56:ed:b4:ed:d7:63:
f7:5b:b4:29:f3:fd:41:54:04:78:75:f6:92:32:69:19:56:9f:
98:3f:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:25:33 2025 by rpki-client