Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bbec167-0222-36f0-8c1d-2bc237710fd2.roa
File: 3bbec167-0222-36f0-8c1d-2bc237710fd2.roa (raw, json)
Hash identifier: JpmwMRLhrexTTAyCXEUkA0WClIJOLBntznJc+zWF57c=
Subject key identifier: BA:49:2B:F2:6B:5E:7D:6E:37:F0:10:A0:1A:E6:D6:5A:68:00:97:44
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F188964C03F02E1265FB745AD
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bbec167-0222-36f0-8c1d-2bc237710fd2.roa
Signing time: Wed 31 Aug 2022 12:00:00 +0000
ROA not before: Wed 31 Aug 2022 12:00:00 +0000
ROA not after: Thu 06 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 128.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:18:89:64:c0:3f:02:e1:26:5f:b7:45:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 31 12:00:00 2022 GMT
Not After : Oct 6 04:00:00 2022 GMT
Subject: CN=d973df95-07af-4dab-9a8f-903a7e5aefdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:a5:63:a3:1b:f7:d5:7b:ae:63:c1:64:10:
ad:ec:18:2f:21:73:26:9c:0b:b8:6e:e2:c0:26:70:
d5:5d:b8:b9:db:b9:07:c0:92:3c:5d:40:9b:77:93:
8e:33:21:7c:9d:25:0f:0e:d0:3c:a8:d9:50:cf:22:
8e:96:6a:82:27:b6:e0:f6:86:b4:eb:c3:a4:0a:31:
db:bb:c8:1c:d4:7d:9b:21:ba:56:ad:f0:51:23:0c:
10:a2:f8:97:64:84:5b:c6:4e:29:c9:b7:83:e6:c9:
db:38:68:df:20:49:fc:ac:49:e6:08:f4:07:86:dd:
ea:dc:40:b5:45:5d:7d:46:a5:ca:26:15:bd:25:18:
3a:8d:32:d3:4f:e2:78:4f:23:8a:c2:60:ee:5a:e3:
22:e9:bd:cd:9f:45:04:48:42:d3:3f:e2:97:1b:4c:
28:6f:28:7d:c3:79:6c:ac:c7:36:62:41:1b:14:7c:
f2:dd:27:98:4b:e6:08:e6:95:1d:3b:44:48:d4:5c:
c2:c4:7c:a2:4d:b3:55:b1:3c:7d:45:51:b9:b4:da:
6e:35:e4:7f:30:1f:d0:64:0a:0b:b1:dd:67:52:5a:
fc:7e:9c:cf:03:3e:a8:6d:51:13:49:c7:1c:d1:7d:
f6:eb:70:af:40:10:17:c6:da:e4:b9:05:41:56:7c:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:49:2B:F2:6B:5E:7D:6E:37:F0:10:A0:1A:E6:D6:5A:68:00:97:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bbec167-0222-36f0-8c1d-2bc237710fd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e4:16:42:9f:d0:ab:8d:b3:bd:29:0f:2e:2d:25:42:2c:2b:
3b:35:7b:80:c9:fd:d7:6f:8c:5e:2e:11:2b:ee:d8:dc:92:47:
bf:d0:ca:81:52:1c:3b:74:a4:e6:25:db:40:38:cb:ea:09:fb:
26:7b:d8:ea:99:23:c3:39:b5:2e:95:b2:9d:7e:a8:2b:15:db:
d6:99:08:2d:44:e5:fa:6c:8c:44:f3:a7:ab:2f:e3:a0:7c:55:
23:a1:4c:3b:f3:94:1c:bb:63:2d:30:79:83:6e:a3:9b:2f:41:
93:67:a1:7e:81:c1:35:2d:03:1c:c3:44:e2:9a:61:8c:ec:20:
a6:5c:36:bd:ec:9d:a5:fd:6d:df:f1:65:c3:2a:cc:29:09:15:
0a:25:5d:f4:c3:cf:cf:eb:7b:73:83:a4:d2:f8:4d:4d:fb:35:
f0:68:3e:fd:ca:59:1c:30:dc:50:41:c2:49:8c:fd:3a:f7:f6:
38:8c:bb:5c:8d:cd:40:fa:da:97:5c:50:3d:a8:b0:f4:81:19:
cd:b2:18:1c:27:36:5f:89:68:8f:ed:49:42:45:2c:e2:b8:ce:
85:b3:ed:bf:33:1a:73:d5:3a:61:24:d2:0b:1a:66:c3:44:bc:
c8:6f:ea:0c:5c:4d:cc:9a:c6:00:d4:f6:7e:96:5b:52:fc:a6:
55:78:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:19 2025 by rpki-client