Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f071c33-0674-331e-b655-e78e95513869.roa
File: 3f071c33-0674-331e-b655-e78e95513869.roa (raw, json)
Hash identifier: cg+fRdj56HKaa+q1Wth0f3PxxcL1xIhiOuYjCx8Sov8=
Subject key identifier: 49:0F:6B:D1:CB:B2:85:FD:54:F9:26:C4:50:E2:30:5F:8A:7A:5E:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81C1D64668AD02C60BC26D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f071c33-0674-331e-b655-e78e95513869.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 161.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:c1:d6:46:68:ad:02:c6:0b:c2:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=41e4fe77-c1b4-4d8c-8b9a-cf9d69152259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:aa:dd:3a:42:c1:6b:31:d0:ef:9d:c2:49:
13:6b:79:2b:2b:da:7d:b0:ba:d9:85:96:f7:40:8f:
6d:4f:b0:e4:a3:26:97:3a:dc:a2:af:ca:e4:38:4a:
9c:3f:4e:d4:48:1a:9f:ab:b5:f1:6c:18:ac:16:e0:
56:f7:b8:d2:e3:a9:5f:87:67:04:f2:3e:96:d5:d9:
82:e5:7c:17:f3:f7:9a:f5:38:6b:6b:5a:17:f4:21:
bd:16:26:bc:97:43:56:83:ea:c9:dc:d6:d6:64:69:
6b:08:09:cd:4f:ca:96:ca:18:80:a1:5e:7c:39:2f:
d1:49:67:d9:41:7e:27:9a:11:37:94:f5:47:5c:74:
28:32:36:56:30:c9:ee:9b:da:f9:73:df:54:c2:69:
e6:b1:e0:9b:ad:dc:eb:bf:ce:6c:37:1e:44:10:bc:
02:0e:99:b3:e7:8d:64:72:19:24:e5:6a:9d:30:ca:
19:5d:db:1e:a2:32:8d:7a:67:15:f1:43:bc:32:b7:
0d:01:55:fc:65:89:a9:20:99:b5:a1:94:e4:9a:2d:
49:d7:79:c0:f2:62:6a:d3:b1:54:0a:07:af:c9:32:
a4:6a:92:37:5c:02:c7:77:90:46:1c:56:dc:ad:e2:
8b:04:8f:1b:4e:ee:7c:3a:1c:ef:ed:bf:eb:ab:41:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:6B:D1:CB:B2:85:FD:54:F9:26:C4:50:E2:30:5F:8A:7A:5E:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3f071c33-0674-331e-b655-e78e95513869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:6f:5d:f8:00:30:f5:88:dd:6d:ee:0c:ec:91:8f:48:be:eb:
6a:8c:fe:fa:11:61:83:0b:1e:eb:24:91:cd:29:7f:c0:64:fb:
08:a3:e1:0d:cd:d3:74:ab:65:0e:31:a8:80:c4:d2:c4:98:37:
bb:bc:0c:37:d5:62:a0:59:20:69:01:20:42:9c:f5:ac:69:de:
01:0c:09:8d:66:ac:e5:db:a6:81:63:b1:2a:9c:a3:a1:5f:aa:
96:e8:c6:28:8c:dd:17:68:a2:de:fe:0f:0f:91:db:dd:92:37:
b1:c6:7a:d3:78:b4:79:b2:67:3c:16:be:11:7f:c9:d9:47:f5:
28:85:d8:43:83:83:be:6e:27:3f:47:e5:2f:9a:a5:fa:7c:ad:
89:0c:a6:e9:dc:b1:bf:ce:aa:f2:df:b5:21:64:ce:f3:64:b9:
a0:41:da:6d:ff:68:34:84:62:7d:24:35:d2:e9:ca:5a:f8:80:
42:02:e0:ae:fc:c7:c2:70:ca:3d:d4:57:7d:00:63:7c:c3:ed:
2d:72:90:7d:af:dc:b9:8f:bf:63:a9:2a:1c:fa:a6:65:49:e6:
54:6e:be:46:d2:fc:23:73:b1:71:c9:48:55:0f:ea:b6:45:60:
32:9e:98:3b:85:3c:11:ba:02:74:d0:d3:43:f2:5e:2c:b5:e6:
6b:a8:7f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:57 2025 by rpki-client