Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38344c81-36a1-3512-b297-ef8784c6a939.roa
File: 38344c81-36a1-3512-b297-ef8784c6a939.roa (raw, json)
Hash identifier: bijISQGFWvS3DJvAWP+EJPyCIasSV7R3R8shsWwaX18=
Subject key identifier: 43:85:8E:CD:28:FA:57:66:3F:84:94:13:99:52:A9:AE:C8:CB:FF:D7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCCF3B8047EE443DA49D47A20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38344c81-36a1-3512-b297-ef8784c6a939.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:f3:b8:04:7e:e4:43:da:49:d4:7a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=e9b345a5-c8cd-4249-94ac-78c984df9f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:f3:43:ff:66:49:d4:0a:08:27:c7:1e:3d:
84:db:92:d2:8c:33:9f:7c:bf:f9:dd:6e:c8:5a:94:
9e:21:50:74:06:6a:08:59:c3:cc:71:f5:48:27:19:
f5:80:86:48:81:e0:8e:2d:44:24:5d:45:59:99:03:
90:b3:7e:96:2d:f0:df:ab:66:cc:51:75:74:67:22:
2d:32:a5:5a:0c:ae:97:2c:4e:36:e9:b0:e1:ae:aa:
3b:4a:04:95:6d:63:02:41:3b:6b:a4:67:c7:8a:81:
62:75:0b:94:87:b7:b6:c7:ff:d4:58:81:96:46:c6:
56:ef:5f:84:15:22:05:1b:7c:13:34:24:f6:02:33:
57:77:88:ec:0b:83:48:dc:dc:c5:9a:0a:e1:3c:67:
22:09:20:ba:28:5c:35:2a:13:92:11:4d:33:46:27:
fc:33:89:f8:d3:bf:80:f0:78:46:9e:7e:ee:14:6a:
a8:dc:53:01:ae:f3:f1:ee:dd:53:c2:ae:cf:f9:41:
b5:d3:cf:04:3b:ab:bb:e3:5f:2c:aa:4e:0f:0e:73:
45:98:9a:e0:e0:d9:ed:3b:ac:0c:8d:19:da:a1:6e:
30:74:15:0c:e6:aa:fc:da:27:6a:1b:37:e0:24:99:
10:55:88:69:2f:3f:20:94:b6:aa:69:62:1f:78:fc:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:8E:CD:28:FA:57:66:3F:84:94:13:99:52:A9:AE:C8:CB:FF:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38344c81-36a1-3512-b297-ef8784c6a939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:5a:d3:d4:5d:ab:b1:10:2e:84:fa:aa:ec:59:d3:62:fe:30:
b9:44:60:f6:c4:2b:57:7d:cd:d2:17:7d:7d:ce:90:c9:28:52:
0a:0c:ea:54:06:a1:c4:74:bc:d2:5d:79:1f:81:9f:0f:0e:d8:
36:36:16:f5:47:30:57:e1:15:18:98:44:67:ea:f0:15:ce:00:
0d:ad:25:5c:0b:b3:0f:b6:30:0c:08:ac:36:52:bd:7c:52:98:
b5:b6:6a:1c:7b:c0:5b:97:cd:f5:6b:f8:f8:d3:ca:25:98:db:
b3:72:b6:a8:a4:7e:c9:f7:f5:8c:8f:20:fb:67:0c:9e:d9:e6:
8d:b9:12:4c:af:fb:4c:78:80:85:d9:f1:77:78:30:ac:e6:83:
b3:55:e1:92:18:f1:da:9f:34:fc:27:e3:72:5f:a8:af:53:16:
e8:c2:65:eb:72:59:a9:78:b6:5d:e2:77:ca:59:20:08:1c:41:
81:88:2a:ff:48:f5:3d:4a:1f:c8:46:95:ce:a6:21:e4:b2:00:
14:09:9a:e1:e5:34:fa:eb:72:bf:b6:1f:54:e3:01:dc:6d:dd:
0d:4a:89:c4:e5:ff:b1:6b:82:ca:fd:7a:f6:8c:c7:86:9f:1a:
72:aa:f7:d9:43:cf:43:34:23:8a:13:c0:ff:90:61:4e:89:68:
45:1d:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:02 2025 by rpki-client