Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3952f00d-cf09-3c07-a7c4-3a123242755e.roa
File: 3952f00d-cf09-3c07-a7c4-3a123242755e.roa (raw, json)
Hash identifier: nA2fiTnljh+nAe4qVwSu72j627f47HE8x3TGrsvpeC0=
Subject key identifier: 68:08:DE:5C:92:47:40:17:9F:A6:16:8F:4E:AB:88:48:1B:49:E5:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584024E4247001121D1092E10720
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3952f00d-cf09-3c07-a7c4-3a123242755e.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 166.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:e4:24:70:01:12:1d:10:92:e1:07:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=ac825bd3-abbb-4cf5-8e09-a1cdbbbc5f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:4e:57:7e:6c:d3:16:9f:c7:3b:11:85:09:
ea:05:3f:13:8f:27:d6:5d:0a:7a:e6:b9:77:35:4a:
0d:eb:d0:db:49:38:d3:ad:6a:01:39:30:f3:71:80:
df:e9:ab:dc:b7:dd:87:7c:80:e7:80:f3:a3:e8:3f:
cb:88:9f:08:b8:f7:2f:94:67:3c:3b:c3:f6:ea:89:
f0:2f:89:36:2a:e4:d5:9f:26:61:c4:bb:5d:65:01:
cc:55:f1:73:95:4c:21:c4:3d:15:04:55:3b:78:91:
4a:eb:46:3f:0e:f9:43:f1:9f:cd:c9:1a:d8:bd:80:
1d:ac:f9:5a:e1:0b:92:b5:50:ef:74:9a:e9:b6:da:
70:0b:67:25:0f:25:dd:0d:2c:12:08:80:d3:5b:3d:
ef:27:bd:86:be:3e:2a:46:19:b2:64:54:aa:57:97:
1f:61:37:02:24:86:d7:e8:fb:8e:e6:6e:b0:a4:06:
a5:bd:89:07:13:75:16:fd:9f:00:a5:14:69:f5:a6:
cc:1a:4f:4c:64:fd:96:ba:f7:75:4b:d4:00:1b:af:
98:b9:16:bb:be:61:90:d2:0b:6f:4a:f4:2e:62:ce:
d3:44:b6:2d:47:66:31:89:34:6c:c1:86:0d:44:f3:
a5:54:f4:31:2b:1d:04:1c:05:35:50:b2:d8:cd:1d:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:DE:5C:92:47:40:17:9F:A6:16:8F:4E:AB:88:48:1B:49:E5:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3952f00d-cf09-3c07-a7c4-3a123242755e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
166.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:bb:8b:c6:dc:0d:1a:fe:5b:40:46:87:07:24:b5:0c:02:6e:
7b:92:ec:ac:40:fc:9d:2a:6c:7e:59:f7:73:a3:39:c1:8f:4d:
60:74:56:3c:a3:2b:34:8a:11:9b:34:63:51:c2:6a:27:ec:89:
27:37:d3:8d:32:dc:43:7b:bb:f9:a1:9e:be:94:1d:05:9f:39:
e8:4b:63:1e:91:f6:2f:1e:30:16:74:e9:7c:92:be:72:9c:ce:
4d:9c:13:12:47:13:40:66:1d:d1:c9:73:98:02:61:b7:db:89:
7a:de:b9:47:c1:4a:fe:d6:e0:13:8f:be:0d:c9:82:b7:c0:38:
49:44:89:ac:c5:3c:9c:4d:d0:85:85:37:e6:31:1b:4c:b2:b7:
23:23:3a:d6:2f:89:20:b4:2f:7d:89:39:6e:a4:96:b6:1b:0d:
af:5c:2d:a4:db:7e:97:51:11:8a:f7:5f:3e:89:8b:c4:93:ea:
0e:cc:09:38:ed:c3:e9:f7:23:94:72:f4:0b:0e:fb:27:48:c6:
5c:3b:ea:82:24:55:aa:b5:bf:57:17:65:42:2b:51:f3:c1:2e:
38:8c:cb:e0:43:3c:bd:27:d9:09:ca:7a:bb:ed:9e:d3:ed:c3:
c9:66:ae:12:c4:c8:4d:b3:b6:0e:e5:30:16:a7:42:91:58:9d:
cc:13:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:30 2025 by rpki-client