Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/437fb82a-a8f6-346f-98ba-6a8e836df547.roa
File: 437fb82a-a8f6-346f-98ba-6a8e836df547.roa (raw, json)
Hash identifier: 1boGjN6hoIG4ufeeH+2fLaQgyyA5JcBFO56whqGK0Bw=
Subject key identifier: D3:EC:79:3F:B9:E9:06:9F:3D:18:D7:7E:CD:65:43:11:68:A6:B9:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EC739B874862C4CE645F0E480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/437fb82a-a8f6-346f-98ba-6a8e836df547.roa
Signing time: Tue 02 Aug 2022 12:00:00 +0000
ROA not before: Tue 02 Aug 2022 12:00:00 +0000
ROA not after: Wed 07 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 143.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c7:39:b8:74:86:2c:4c:e6:45:f0:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 2 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2022 GMT
Subject: CN=178ae67a-d1d0-4923-b6f3-959cda6ca8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:d1:d3:2e:04:c3:c0:5f:1a:7c:cb:d8:f2:
f4:51:2f:2a:a0:9e:35:13:fd:90:74:eb:5a:21:02:
5c:d5:ac:c1:77:43:8a:f6:00:5f:49:aa:d4:e3:05:
70:ba:9c:1f:28:87:6b:80:fa:df:ce:ce:34:25:c8:
a3:9f:52:05:c2:af:ff:46:0b:0d:be:2c:00:dd:47:
66:bd:f3:d3:eb:0a:f2:17:fa:12:81:59:7a:7c:62:
37:cd:dd:c6:ca:5c:25:ed:3d:fd:27:16:75:d2:ca:
38:ac:1a:2f:fc:96:13:e6:cc:dd:8e:e4:bb:8b:fb:
65:67:9a:c6:b5:3a:65:cb:7d:c2:c9:65:c5:da:64:
74:49:94:82:0c:9c:31:a2:da:43:3a:fe:2e:f3:8f:
41:ae:10:20:02:23:1e:3e:10:0a:32:dc:63:87:78:
61:51:89:40:0d:a5:7f:48:82:05:e5:94:47:46:6b:
40:35:f1:a4:05:d8:05:df:61:5b:b5:49:c2:0f:4d:
de:13:2d:ba:c1:4c:f0:13:25:c7:05:d2:22:e0:b3:
67:ef:58:6e:af:c4:92:6b:dc:15:d0:6e:16:b4:85:
f8:ed:d5:f6:60:46:2d:3b:6d:2d:38:03:dd:38:bd:
77:41:d3:6a:93:e9:6e:d5:0c:28:37:ad:e1:fa:d7:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:79:3F:B9:E9:06:9F:3D:18:D7:7E:CD:65:43:11:68:A6:B9:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/437fb82a-a8f6-346f-98ba-6a8e836df547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:9e:8e:5e:37:85:e5:56:08:fe:70:0f:49:0e:1b:9e:12:de:
9c:60:f0:a8:71:1b:d2:45:db:2a:2a:fa:16:ad:cf:3f:47:a4:
95:50:37:76:84:3e:58:0a:9e:9e:90:82:86:4f:f3:a6:77:97:
d6:c3:40:0a:e7:48:bb:09:65:aa:59:5d:1d:19:75:87:b6:23:
28:a6:18:10:e6:df:d6:fc:4d:e9:0d:b9:ba:0f:20:00:a9:a0:
bf:97:4d:9e:cb:b6:95:16:e2:0b:20:6a:e2:c9:9c:71:99:bc:
b4:d5:dd:00:bb:7d:df:78:dc:24:88:ed:bd:77:c4:2d:96:a8:
55:b2:ef:66:1f:7f:93:20:36:70:28:6c:b2:9c:38:1c:96:b3:
b9:ca:2a:ee:69:0b:dd:89:5c:f4:c8:d1:48:eb:36:2b:c9:61:
5c:cb:fd:50:fc:5a:3a:ba:7c:01:a1:9c:d9:d6:19:df:a7:dc:
c8:e7:d4:9d:f7:8a:e2:7e:8f:2e:44:e2:73:47:15:28:33:fd:
37:48:50:b6:33:ab:7e:05:66:87:b4:bc:dd:10:45:97:db:14:
4f:85:9f:57:a3:fa:53:ec:7b:99:99:dd:6c:39:b8:49:29:1c:
c2:1a:48:a3:c8:17:29:6a:34:c2:b3:4e:2b:62:0f:c7:b4:d2:
b9:a0:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:07:44 2025 by rpki-client