Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46e536b4-d506-3da1-acdc-55c25c4d9c77.roa
File: 46e536b4-d506-3da1-acdc-55c25c4d9c77.roa (raw, json)
Hash identifier: kKOnS2DO7H/wMycEYJrkIhkXEg6I7IJy67Nvbotzhec=
Subject key identifier: 38:F1:45:F9:93:1A:82:47:7C:CC:E5:82:7B:88:A4:4C:BA:E2:EE:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404E812E3D96C6D2A6B3D0DDC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46e536b4-d506-3da1-acdc-55c25c4d9c77.roa
Signing time: Tue 20 Dec 2022 18:48:09 +0000
ROA not before: Tue 20 Dec 2022 18:48:09 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:81:2e:3d:96:c6:d2:a6:b3:d0:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 20 18:48:09 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=8b288e50-32cc-44c1-be6e-da267d45a104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:f7:cc:e5:51:9e:ad:bb:05:66:ba:70:6b:
0e:35:d0:b0:97:d2:55:a4:07:39:27:56:bc:d6:9c:
b7:8a:7f:0a:c2:1c:b8:96:b8:43:e5:7b:1f:40:f7:
e9:d2:92:1a:cd:30:bc:17:31:ec:6c:b4:12:3d:68:
28:be:ca:28:69:37:aa:12:7e:54:7d:63:66:43:3c:
20:94:08:4c:42:92:74:23:85:70:23:7b:8c:d6:d3:
73:08:e2:3d:9e:d8:9e:99:da:36:34:95:f7:8d:5d:
a9:ce:8e:0f:0e:99:68:8d:79:e8:80:fd:81:c7:fc:
9b:3e:5b:da:33:98:85:31:c0:b4:21:94:b6:97:8e:
67:c3:b1:74:f8:ec:4b:41:a9:94:a6:99:ea:dc:3a:
da:72:6e:a1:e6:44:19:06:c0:7a:00:b8:b4:f4:7e:
64:d9:94:23:ff:82:28:9f:fb:b3:f3:86:2b:2a:f4:
86:0b:49:77:c6:71:2d:01:3e:85:8f:87:65:00:90:
5d:d4:86:e3:ab:4c:03:0e:b3:da:d3:d9:01:71:57:
0b:89:57:89:67:af:b0:79:a9:20:1e:ab:d8:d2:92:
b8:8c:24:ef:03:ec:00:ad:56:99:98:49:be:bc:c0:
38:dd:ab:2a:4b:09:df:f5:be:84:70:2e:02:43:a5:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:45:F9:93:1A:82:47:7C:CC:E5:82:7B:88:A4:4C:BA:E2:EE:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/46e536b4-d506-3da1-acdc-55c25c4d9c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ff:4f:24:da:a6:a4:95:e6:2a:48:36:8c:43:ea:a7:c1:6d:
32:1c:50:ba:e7:41:03:7d:59:d5:17:03:c9:c8:cd:4f:af:59:
5d:d1:64:a1:ec:01:ab:68:f4:90:50:fe:a5:24:2e:64:67:5f:
37:4e:c3:8e:97:fa:61:7b:22:d9:0e:5e:06:82:3f:68:ed:91:
77:8e:a1:3b:9b:18:e3:fc:a8:4d:3f:27:f3:60:5a:38:77:96:
16:90:7e:57:49:ce:4b:ef:c2:40:4f:47:b1:3b:eb:9e:7a:4f:
b3:9e:85:fb:25:82:2c:d9:16:d4:bc:a4:02:f1:a5:a0:46:d8:
ca:80:8a:65:52:da:c4:29:e4:0a:cf:9e:3c:3a:7b:c6:8e:17:
01:c3:ad:d5:3b:3a:62:bc:e1:29:c7:e2:59:83:3a:e3:de:11:
be:90:2b:1f:dd:c5:ea:f8:6b:42:c7:fc:58:9f:7c:0e:a3:55:
5f:f3:11:7c:61:ac:20:7d:2d:30:41:85:19:fa:15:1f:75:c5:
63:54:ae:33:c0:49:4c:6e:0f:d0:8b:52:24:30:6f:a0:71:c9:
9c:b8:d7:f9:f7:3d:88:d8:a8:78:a2:c2:ba:70:4f:e0:d0:db:
c5:af:7d:69:f3:02:bf:54:6b:66:e2:6b:eb:1a:8c:eb:81:4e:
e4:dd:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:54 2025 by rpki-client