Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48ae2771-dc10-3cda-ab42-c6f391f00823.roa
File: 48ae2771-dc10-3cda-ab42-c6f391f00823.roa (raw, json)
Hash identifier: Nj7RCWc3CO3IRNVCmENDOzXca0uA54WdtrfrLU2rvQ8=
Subject key identifier: D2:7D:58:F6:18:33:A4:0D:4E:B5:3E:0F:28:CC:FB:DE:79:2A:C9:8C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAC171DE0AE9C13131DB60F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48ae2771-dc10-3cda-ab42-c6f391f00823.roa
Signing time: Sun 23 Oct 2022 12:00:00 +0000
ROA not before: Sun 23 Oct 2022 12:00:00 +0000
ROA not after: Mon 28 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 160.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ac:17:1d:e0:ae:9c:13:13:1d:b6:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 23 12:00:00 2022 GMT
Not After : Nov 28 05:00:00 2022 GMT
Subject: CN=6c2ec0dc-d4c0-418e-8807-4872c896a82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:ef:35:b8:3c:14:91:61:4d:18:55:3b:73:
0e:a3:0e:79:f0:cf:36:3a:04:11:2b:c5:7f:51:2f:
da:bc:ee:4d:a7:38:e7:17:92:d6:9a:55:90:ff:3c:
6d:9c:21:a0:97:85:0e:34:5f:f9:d2:a5:3c:57:8c:
14:a1:9e:45:62:94:14:51:a0:0b:e8:df:5d:3a:02:
cf:f6:d0:59:ea:ba:ff:4e:43:05:90:c4:2b:9f:4b:
da:8b:82:d1:48:71:f0:6b:8e:d5:04:67:71:ba:4d:
51:b9:6c:40:98:18:1e:d6:0a:36:6c:23:6c:56:4b:
2f:06:e2:c5:54:ec:5e:3a:f3:11:36:ed:3e:72:cd:
df:cc:86:4e:06:80:6f:f5:bc:0b:be:ec:26:f6:24:
ee:e5:70:f8:8a:84:95:d2:23:fb:23:39:22:b5:39:
3b:3d:2b:db:6a:b9:e9:87:e4:31:60:1c:bc:38:fe:
94:67:75:28:df:90:cb:4b:72:19:e0:71:72:7a:f7:
aa:b1:18:0f:d9:ae:71:97:e9:91:6f:40:22:b9:5b:
86:d1:23:80:12:a6:9a:c7:1e:28:75:50:06:20:7f:
dc:ed:53:15:44:53:7b:f0:dc:64:ee:7c:91:8e:35:
7c:f7:e2:fa:78:4f:e3:c6:72:30:08:85:25:b1:7a:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7D:58:F6:18:33:A4:0D:4E:B5:3E:0F:28:CC:FB:DE:79:2A:C9:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48ae2771-dc10-3cda-ab42-c6f391f00823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:0e:57:e3:68:bc:88:2b:10:31:28:a9:ae:ba:50:d6:5a:9d:
ad:38:a6:dd:f6:bc:22:ce:f7:80:f8:46:df:36:c9:34:15:83:
46:a4:3a:4d:f0:9f:cf:00:f5:e7:3d:53:cf:6e:6c:d7:d1:18:
4b:82:3d:32:dc:30:ae:3c:44:f7:47:f7:9b:df:b9:6f:d0:6a:
f3:39:87:ee:b0:e6:f0:2f:2a:a3:10:ed:ee:14:8e:21:03:9e:
0c:31:e8:99:60:98:20:31:8b:7b:4f:91:db:0b:3b:56:7d:83:
fe:08:e8:2c:7a:60:13:7a:97:8f:d9:78:1f:4f:a3:64:ca:2e:
84:3e:14:c3:7e:8f:60:ba:db:87:87:75:72:85:8e:4e:c5:d6:
4e:84:33:e5:5d:52:26:32:4e:03:85:f7:9a:ea:5c:f6:ce:fd:
68:8b:c1:44:be:bc:74:a1:ca:59:25:ef:c0:e3:c1:f3:4d:c8:
ba:85:0e:d2:1e:83:25:43:d0:bc:35:e3:44:77:fc:8b:55:4c:
f8:25:08:a0:1e:80:5f:b0:27:da:27:87:17:d5:77:b3:6b:c7:
db:7a:bb:64:ae:03:93:13:c5:dd:4e:1b:50:0a:42:c9:f5:0d:
b7:df:da:36:66:56:b9:a3:16:4b:1f:e3:bb:4a:0c:bb:cb:68:
69:b2:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:49 2025 by rpki-client