Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/457cc88d-60c3-34ca-97a2-0bc8929e2299.roa
File: 457cc88d-60c3-34ca-97a2-0bc8929e2299.roa (raw, json)
Hash identifier: QAm1n4A0ArWOD/VJLFKrQTDUAlfxKKXFQgkiJidXdgc=
Subject key identifier: 84:31:85:72:20:40:33:69:5A:8A:75:C0:7E:D9:7C:4D:6C:A0:CF:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409A94885F3DF5B135FB87E700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/457cc88d-60c3-34ca-97a2-0bc8929e2299.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 135.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:94:88:5f:3d:f5:b1:35:fb:87:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=3f65d643-dd16-4a5b-8376-8b32743fd17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:a4:cb:0c:ff:60:8c:53:43:ca:27:89:dc:
38:ba:87:f8:f8:f1:9f:9d:c6:ee:e5:ea:4d:70:a5:
31:42:ff:03:09:56:4d:f2:a1:26:5e:7d:3e:10:a5:
6e:27:a0:49:67:bf:25:a9:b5:d0:ac:ec:ec:03:ed:
4e:00:80:e6:56:62:8f:6f:c6:4c:10:dc:c8:28:cd:
dc:9f:45:ef:ea:c5:85:b9:2a:87:9c:d0:6d:bb:97:
4a:d8:f3:8c:d9:2f:2e:f9:e9:a4:e9:cb:b9:9a:17:
e5:88:da:2e:43:d3:43:bf:1b:85:c4:e7:4b:8c:da:
95:d6:56:1f:e7:e9:08:ae:01:fb:fd:ca:e1:05:22:
f8:74:48:a2:ab:7d:e2:9e:32:f9:1a:fa:62:ed:e1:
41:4c:80:92:4e:90:da:6f:13:4d:63:36:f9:bb:18:
fc:24:fc:b5:17:c2:20:6b:93:af:c0:fb:13:90:c7:
88:69:66:30:b7:01:06:bb:1a:42:32:fb:38:49:db:
cf:58:51:17:ee:43:96:27:d5:d4:51:26:9b:6c:23:
8c:37:0d:d0:78:3e:b3:f6:64:d2:1d:1c:be:01:92:
e3:6c:2c:c7:3b:65:57:1c:d8:22:ad:fe:c9:1a:73:
0e:9f:b8:f3:6e:97:e6:43:6e:f4:47:c5:0d:d5:40:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:85:72:20:40:33:69:5A:8A:75:C0:7E:D9:7C:4D:6C:A0:CF:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/457cc88d-60c3-34ca-97a2-0bc8929e2299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
135.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:b5:9b:88:2e:51:4b:a3:d9:e7:1f:83:e9:8b:87:00:60:34:
f9:7f:c4:bc:57:f4:e7:fe:f9:39:0b:dc:72:0b:60:b3:bd:d6:
0d:a5:6b:dd:4a:23:24:df:1b:4c:c8:08:58:8a:f2:2f:75:55:
3a:b5:40:69:a0:60:20:f3:3d:89:e0:89:76:f9:9a:b6:41:eb:
fe:77:43:36:72:60:d6:d4:76:1c:fe:00:19:b5:31:52:2c:62:
a9:87:82:6e:26:4a:0a:7e:cd:f2:14:11:de:c9:d1:fb:e7:64:
35:82:d5:e6:79:6a:f4:67:dc:25:3a:32:aa:f2:4a:9c:7a:e1:
d3:c9:36:7d:a0:a3:e9:80:b6:10:44:0d:74:83:d3:24:dc:21:
95:b8:13:af:72:fb:d5:01:78:65:99:c9:65:d8:54:18:d4:b9:
1c:0d:21:32:eb:14:a8:41:fc:12:ac:78:f4:c0:f3:ba:36:d6:
7c:9b:65:74:94:3c:07:0e:89:5d:c7:41:c8:f2:38:07:64:9e:
cd:6b:60:df:5b:25:ce:c9:59:00:99:08:61:9e:00:1c:0c:95:
1d:5c:06:37:c5:15:c2:a3:45:eb:84:3d:1b:37:f6:7c:4b:12:
6c:d8:cd:dd:01:34:fb:75:8d:79:fd:e4:f0:7a:ab:aa:91:50:
f6:e3:e3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:30 2025 by rpki-client