Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/433faf61-b2b3-3d0d-88de-a25342de25d4.roa
File: 433faf61-b2b3-3d0d-88de-a25342de25d4.roa (raw, json)
Hash identifier: Tg9fbwibyCNZU6Da/qjuBv/V2qZaU36/xdaPoe4LtWI=
Subject key identifier: C6:2C:ED:46:12:47:B5:63:03:1B:09:96:8C:12:66:FA:80:54:CF:59
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AFECF8F52C7B8D2AFA9CF1D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/433faf61-b2b3-3d0d-88de-a25342de25d4.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 146.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:af:ec:f8:f5:2c:7b:8d:2a:fa:9c:f1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=990557a5-00c9-4c5f-8a31-ad54f0460053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3b:a9:b3:f1:05:64:de:56:5f:17:bb:c8:8b:
47:50:00:ba:85:03:8a:00:68:8a:6f:1e:ed:ac:bc:
41:ca:85:b7:8a:51:c0:3d:c1:77:78:3a:f7:17:b0:
71:c4:5f:6d:e9:04:77:76:d3:8b:fb:24:78:1c:51:
a2:83:83:24:04:fe:a7:2e:a7:fc:82:5b:16:25:69:
dc:33:30:2f:b4:de:6a:3f:50:aa:c3:2a:54:6c:24:
17:1b:10:25:bf:e8:9d:d8:a0:16:a8:24:1f:6f:ea:
36:4d:88:0a:57:47:51:99:6a:2a:37:7e:58:b7:f3:
74:63:58:b2:6f:f1:f4:43:90:58:9e:95:92:da:39:
33:7e:f7:fe:ff:10:9d:29:86:f5:f0:4c:84:6e:7e:
6e:ea:f1:1d:71:59:fe:09:2d:07:e1:97:67:b5:c7:
86:c7:75:08:fc:ba:72:87:51:5a:e2:e0:02:15:09:
81:85:96:9f:78:2f:30:21:74:b5:61:55:df:e6:52:
40:57:e6:ca:58:92:c1:72:c4:43:c7:91:2b:a2:eb:
5e:e3:68:c6:34:d3:6c:78:59:dc:4e:c4:8c:14:9f:
71:84:f2:78:e8:14:e9:6b:36:03:23:9a:ae:51:0a:
75:75:75:63:68:f0:dd:c9:a2:bc:16:76:ca:24:1d:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2C:ED:46:12:47:B5:63:03:1B:09:96:8C:12:66:FA:80:54:CF:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/433faf61-b2b3-3d0d-88de-a25342de25d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
146.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:70:14:73:5e:6d:ad:49:87:e7:73:98:0d:64:95:b0:d6:83:
78:86:93:7f:4b:87:55:da:d8:b7:08:3c:3c:a7:1b:c8:18:85:
ff:33:14:7e:a4:62:15:c1:11:95:34:c5:25:b2:a6:28:b6:94:
de:6c:b0:f6:ac:b7:68:e7:51:5b:88:a8:8d:d1:be:c4:80:6d:
58:bc:fb:88:bc:d9:da:e9:a1:ed:1c:fe:4a:75:ef:69:43:d7:
07:04:0c:ec:d5:cf:c5:24:52:61:94:8e:24:28:e8:de:ae:c0:
90:1f:19:8f:a9:b9:c7:fe:09:32:7a:88:d1:60:96:f5:c9:18:
48:db:59:46:c2:6e:af:7c:f1:fc:72:66:e9:fa:ee:44:98:1b:
e7:be:44:78:27:2c:83:ef:e1:38:89:13:55:c1:65:82:92:b9:
ce:47:74:6d:36:c8:e2:d4:4e:90:d1:6a:d5:4f:0a:59:8c:ae:
31:a8:83:32:11:92:7f:1f:bd:38:2e:0d:43:83:59:65:da:77:
12:b8:ea:38:8b:d0:62:c4:20:84:ef:32:c7:fe:17:d7:2a:01:
c1:f3:a9:6c:0e:4c:56:5f:91:dd:d7:70:e1:ff:2b:08:b0:74:
e6:ed:de:b7:61:4e:13:91:6a:4b:9d:40:4b:52:bc:d2:bb:ab:
dc:f2:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:57 2025 by rpki-client