Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a857ab5-802e-3fbc-9d5b-8c725007262c.roa
File: 3a857ab5-802e-3fbc-9d5b-8c725007262c.roa (raw, json)
Hash identifier: 5PRdB3gegnSp/K2D7YdIUGkWZog7Xv6jnnCmyd7URlc=
Subject key identifier: CB:33:D0:75:30:A8:62:D6:48:30:0D:BA:E5:87:85:96:C9:95:43:3E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840357F13968D1440C739A56250
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a857ab5-802e-3fbc-9d5b-8c725007262c.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 206.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:7f:13:96:8d:14:40:c7:39:a5:62:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=35a72933-1e70-4ba5-9cfb-9a211525fe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:89:bd:87:5b:6b:e7:c7:72:ec:02:4e:57:
23:d3:e5:7b:74:e6:83:f3:72:32:f9:59:db:a0:a9:
34:e7:e0:0f:5a:82:f2:50:76:1b:61:80:0d:21:9d:
8e:3b:6d:6b:e0:9c:c0:18:3d:75:00:96:01:dd:c4:
fb:5a:6e:4a:58:c8:c6:e9:99:ad:27:05:94:6d:70:
eb:00:80:19:79:e8:99:37:14:14:d5:53:01:aa:79:
5c:c9:46:cf:75:d9:87:89:74:b2:5d:8a:7a:82:82:
a0:10:40:1c:04:5f:aa:f3:11:2f:34:79:af:b4:47:
70:be:a0:68:b0:01:7f:c4:b4:6e:00:c1:47:5f:6d:
0e:0c:1e:8e:59:e8:05:c2:fd:c2:0a:8b:fc:9f:c5:
ec:ac:7d:a0:a2:69:c5:08:31:78:d9:3d:33:45:1b:
8a:71:a6:d8:e4:41:ab:35:56:e3:fa:51:d1:65:f9:
e9:57:6f:a0:15:7a:86:7f:c1:3e:85:d9:fc:73:e8:
75:3a:fb:9e:42:1f:87:e8:4e:3d:7a:ea:18:90:87:
07:09:9d:72:40:6c:c8:08:8d:28:8c:e2:46:b3:cb:
4d:f1:96:dd:75:8b:1c:a8:1f:e0:8d:66:08:35:0b:
20:0c:72:14:d0:2a:84:15:61:38:27:f3:54:72:1f:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:D0:75:30:A8:62:D6:48:30:0D:BA:E5:87:85:96:C9:95:43:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a857ab5-802e-3fbc-9d5b-8c725007262c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
206.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:06:8e:80:0b:82:e7:39:be:7b:cc:97:a8:82:02:10:f0:c2:
7e:ae:86:a0:d8:f6:30:5c:e0:58:2c:d8:3a:7b:23:b8:3e:0b:
9f:a6:fa:81:63:d7:10:93:ce:1d:85:9c:11:ca:90:db:74:53:
61:e6:0c:9e:6b:dd:73:3d:5e:82:ad:da:73:65:b4:a1:be:70:
1d:b2:12:ba:8a:8e:03:de:d4:63:02:de:41:fa:4b:88:80:3d:
7c:07:e7:cf:b9:43:49:f9:87:7d:81:6a:72:c9:ca:f8:6e:9b:
c7:53:9f:ce:73:a9:bd:8c:52:d2:3f:35:01:36:6d:87:14:bc:
73:1d:dd:3d:db:39:67:c5:0e:36:dd:19:3d:96:b6:08:d3:70:
50:bc:1d:49:cb:08:cf:23:40:9f:30:ca:a9:05:a1:05:c6:94:
f4:3f:f6:ad:aa:55:67:f2:31:c0:1e:1d:ba:ca:98:e9:ce:03:
87:69:31:db:8b:23:fd:e2:8c:5e:7e:65:ff:5a:17:4c:08:bd:
6e:71:7a:cd:50:0d:f9:48:14:7f:21:dd:3c:33:27:db:08:e4:
ba:4a:8c:75:1a:31:e2:53:2a:24:05:86:8b:a1:5e:d6:af:67:
fc:fc:0a:0b:35:10:b5:f4:87:cf:4d:5a:d7:98:5c:56:49:69:
b5:cc:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:12 2025 by rpki-client