Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42d1b4bb-f907-3a24-a440-f7974ada52ae.roa
File: 42d1b4bb-f907-3a24-a440-f7974ada52ae.roa (raw, json)
Hash identifier: EjK4Zll0Bwx+TgjnSlRtoKjPNxza7/vdCa4xHO+eE7o=
Subject key identifier: C4:4C:6A:1B:92:06:2A:9D:5D:D4:25:B3:41:58:30:E6:F4:FC:1C:4D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840891A3F9AD180922630B05180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42d1b4bb-f907-3a24-a440-f7974ada52ae.roa
Signing time: Tue 10 Jan 2023 12:00:00 +0000
ROA not before: Tue 10 Jan 2023 12:00:00 +0000
ROA not after: Wed 15 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:89:1a:3f:9a:d1:80:92:26:30:b0:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 10 12:00:00 2023 GMT
Not After : Feb 15 05:00:00 2023 GMT
Subject: CN=6d199588-2dbc-4336-b75c-ab82e37d351f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:f4:41:ab:4b:27:0f:39:79:88:8d:08:8f:
fb:65:91:b4:fb:84:55:b4:a5:fc:c1:5b:33:79:af:
a5:22:90:c2:89:55:69:0c:14:b6:97:14:ff:05:75:
0b:17:14:21:7e:7e:80:22:07:bf:e4:2b:35:f6:ac:
4b:0b:ed:25:80:99:99:48:18:b1:45:95:2b:1f:4a:
b6:62:b1:22:67:b2:d6:87:72:d4:96:52:0a:c1:03:
6a:10:92:80:74:5e:4d:78:ec:9d:1f:eb:c6:e4:d8:
78:6e:48:8b:92:d9:01:76:81:27:81:91:0e:fd:07:
59:33:26:d8:5b:6d:a0:5b:05:77:38:02:e9:12:27:
b3:8d:8b:ae:f7:fb:82:e1:e6:22:bb:f1:65:22:15:
a2:40:4f:74:ae:dd:55:17:8e:c0:a0:e7:f8:f1:45:
da:b8:23:aa:47:6d:a9:8f:b0:8e:b2:c9:09:30:40:
3a:f0:5a:ae:4e:55:b5:3e:48:49:14:43:38:29:0b:
bd:ea:30:5b:aa:d0:84:c0:9d:39:df:41:2f:46:f3:
d2:ab:4a:93:e0:4f:22:85:8c:3c:3d:b9:4d:db:61:
d0:b6:38:85:81:37:f2:14:41:d9:57:95:bf:28:5a:
a7:80:2b:8e:c3:28:13:94:2c:d6:f5:3b:89:a5:09:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:6A:1B:92:06:2A:9D:5D:D4:25:B3:41:58:30:E6:F4:FC:1C:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42d1b4bb-f907-3a24-a440-f7974ada52ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
15.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:90:c3:3f:bc:f3:eb:88:83:f6:72:97:17:7a:7d:01:d9:a1:
d5:b8:4d:f4:8b:2d:77:50:1a:fa:df:af:60:9f:f9:37:a4:3f:
03:ec:0e:37:21:72:9d:d2:84:ca:fc:61:a6:4c:10:56:a2:c4:
f0:b7:5a:bf:af:6c:ff:f9:c4:1a:75:f1:1d:6d:60:14:1e:a9:
c2:64:07:06:3c:20:a3:a9:cb:91:40:74:f2:20:b8:cb:61:a6:
53:49:1c:51:2c:e6:1b:07:f3:00:f6:6a:02:f8:32:27:2f:6c:
c2:03:e0:73:6d:0e:c7:1e:ec:16:51:0d:2d:03:33:86:92:e3:
6a:e8:28:d6:49:d5:7c:e9:0b:a0:ff:7c:f6:9f:fa:c1:ec:b2:
c6:d8:4b:7e:4c:ba:44:77:31:c1:c2:86:9b:46:ff:d0:46:89:
74:95:ce:76:58:9f:d6:bb:1c:48:c2:a9:5f:61:57:89:9c:35:
11:91:bb:f8:91:9a:7a:62:ec:f0:c9:ac:28:ee:be:6b:e0:13:
e4:61:d7:3b:76:0e:90:a8:5c:6d:11:be:69:0f:ac:33:26:08:
a6:70:54:44:99:b3:fd:3e:46:f7:e4:d4:1c:ee:61:2d:d3:c2:
38:b5:38:1b:17:03:1b:c5:05:54:dd:28:8c:45:ae:16:bf:a8:
5d:5e:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:26:49 2025 by rpki-client