Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4093ed79-d04e-3962-93ac-fac3e4007c2a.roa
File: 4093ed79-d04e-3962-93ac-fac3e4007c2a.roa (raw, json)
Hash identifier: iWb7dRp2/IKjRekHLcvph9PWd0GHmNwZwJ2e00Dm5HQ=
Subject key identifier: 76:3C:F0:23:BC:FA:C8:59:53:9F:03:22:6A:C5:9B:77:A6:58:83:ED
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401FAF8366695E6EBA39ACC180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4093ed79-d04e-3962-93ac-fac3e4007c2a.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 174.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:af:83:66:69:5e:6e:ba:39:ac:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=dce8fb10-339e-4891-a49a-97dcee7d334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:99:ff:9b:23:6f:d5:51:a8:6b:61:33:56:
83:b5:f6:99:66:60:78:46:27:10:83:c8:d1:d5:5b:
11:d8:00:39:7c:e2:33:e3:2e:62:38:d9:58:3a:34:
81:ed:14:79:22:61:65:73:8c:83:4a:20:1d:3e:1a:
73:52:86:b9:b5:c8:31:a7:19:55:b1:84:79:f5:ce:
fe:b4:49:be:4f:92:a5:3a:63:42:fd:7f:1d:70:01:
1c:fe:e7:2f:00:be:e0:ea:a6:5b:de:2f:8c:82:a0:
1b:8e:d7:e7:0e:b3:47:7c:d7:47:da:b9:48:82:12:
a3:2a:c9:64:3f:3c:e8:e4:55:f3:a0:e3:6c:18:ec:
b2:05:d2:e7:1c:cd:34:29:97:41:18:55:07:d5:9b:
45:80:5e:6a:17:ff:ec:59:ef:06:c0:a7:c2:c1:e2:
13:d9:1a:2e:1d:46:c9:81:1b:6c:1d:3b:b0:b7:03:
be:d4:6d:bf:3b:9c:a8:14:51:6e:d2:14:65:32:de:
ab:8a:4a:c9:ff:38:23:68:d8:33:94:41:1a:1a:c8:
9c:b1:1b:c8:21:59:dc:c5:a0:b1:15:a1:77:6b:d5:
5a:74:40:66:0c:2d:68:26:a8:e3:38:9f:6a:c3:86:
74:47:c3:27:95:02:04:38:49:78:a3:b5:9f:41:b7:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3C:F0:23:BC:FA:C8:59:53:9F:03:22:6A:C5:9B:77:A6:58:83:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4093ed79-d04e-3962-93ac-fac3e4007c2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
174.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d5:55:54:12:35:0b:2a:da:5d:81:32:0b:31:6e:c0:a3:ab:
7f:95:a0:40:ab:64:3d:e1:b0:f0:51:bb:8c:75:06:54:5e:84:
fb:b0:b5:04:93:0d:1d:d2:16:d3:c8:20:27:70:67:b5:48:59:
b8:65:94:25:bd:99:bf:d2:1e:fe:44:f9:b4:86:90:e6:f0:3d:
3e:f0:7e:26:50:e3:e1:35:ef:41:2d:b9:b8:fd:94:ac:1b:55:
6d:b4:3f:af:10:ca:9b:e3:d7:b1:47:c4:17:2f:1a:a3:d7:46:
04:53:3a:41:93:c5:24:74:50:12:f5:d9:74:5e:bc:b2:1b:8b:
af:a0:45:6f:52:3e:d0:0d:de:a6:af:68:90:b8:a9:19:5b:cb:
bf:62:ad:eb:46:1a:92:3a:65:77:24:ff:d7:34:8a:c2:51:5e:
8b:ce:83:fe:a4:04:e1:e2:76:29:ec:eb:de:b2:44:b1:9a:98:
1f:d0:1f:d5:46:ed:2c:cb:54:6f:ea:04:b6:dc:51:4b:d9:ce:
08:63:7a:11:b5:b2:9d:1f:22:cf:be:b7:09:b5:d9:22:ea:f8:
cd:e2:a7:c9:15:a4:d1:10:87:67:1d:19:50:cf:f3:9c:fc:9a:
7d:37:fd:ea:e6:de:9f:b9:75:6f:51:b3:94:3a:1f:d6:23:bb:
1b:9c:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:59 2025 by rpki-client