Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e471b8d-684d-39e0-8b55-4135b4334d49.roa
File: 4e471b8d-684d-39e0-8b55-4135b4334d49.roa (raw, json)
Hash identifier: QlJjDfbywSK2xfPeh85oXom/JgtCzBjuOvRomzNCA/Y=
Subject key identifier: 41:83:94:51:95:50:23:24:51:2F:EA:8A:2A:FF:67:EC:54:56:E8:FC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E9189BD766A4E3BB869C240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e471b8d-684d-39e0-8b55-4135b4334d49.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 153.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:91:89:bd:76:6a:4e:3b:b8:69:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=f7c8053d-7da8-4a2c-8cb1-34b099e5df49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:d3:86:f9:08:fb:29:02:16:66:90:f3:75:
70:72:44:d1:dc:e1:d7:da:c1:ce:a9:98:24:76:02:
6b:41:80:23:c9:6a:18:6b:d5:3b:34:80:11:b0:f8:
b5:33:53:1f:88:13:2f:ab:6f:48:ec:c1:27:08:87:
ea:b7:c4:d0:a5:0e:32:f4:14:72:60:d6:0f:1d:a7:
e2:ab:ce:46:3f:21:cd:0b:04:72:79:ac:61:58:8d:
df:f3:59:45:80:54:50:a4:73:19:0e:da:84:55:80:
66:34:6a:53:af:cd:18:26:c2:18:47:b7:9e:03:a4:
2b:fa:d7:27:fc:58:8d:32:c3:6c:41:3e:bd:19:0b:
e8:ad:ab:0d:7e:d2:37:4c:fa:f9:56:c3:9b:03:89:
e8:ea:70:36:b7:01:04:63:0e:a8:11:9a:d1:e2:a4:
fd:27:1c:c3:f7:7c:61:56:49:09:b7:09:df:0e:e7:
1f:85:dd:ce:0e:b9:ea:4b:86:48:44:13:88:33:75:
0d:e6:a0:4a:3b:ad:7f:4e:18:21:3f:2c:55:3c:00:
71:f3:71:c0:95:f3:ef:df:7d:28:65:ab:b1:03:67:
3e:e5:48:0c:4a:38:db:6b:af:a8:a3:39:55:fa:af:
c6:83:33:fc:56:44:ad:44:b8:10:7c:00:7b:1d:c9:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:94:51:95:50:23:24:51:2F:EA:8A:2A:FF:67:EC:54:56:E8:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e471b8d-684d-39e0-8b55-4135b4334d49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:9b:4c:19:c5:2a:59:08:d4:98:e3:e5:a6:53:35:28:3f:bb:
f9:b1:ef:a8:94:54:2f:47:0c:9d:ee:7d:a6:73:92:31:36:33:
d6:2c:32:66:37:b3:fb:62:89:66:91:48:df:f5:35:c2:27:20:
73:b5:60:4a:93:f2:6b:aa:74:53:e7:3d:30:96:24:4e:05:44:
6b:5a:f1:4c:21:3e:6e:db:ec:74:3c:30:5c:e8:96:6d:00:9a:
b4:6d:1c:98:5b:b3:c3:88:40:20:4e:8d:76:ab:af:73:66:f7:
01:98:2e:98:48:66:2d:d9:84:7c:39:c4:21:86:fe:a3:a3:a5:
47:3f:53:a0:22:1e:db:57:91:2e:5c:8a:20:1d:51:3a:18:aa:
93:44:d8:a9:03:af:79:21:88:1d:c3:9a:e9:73:21:77:1e:1f:
be:d0:6d:f0:52:1b:f0:cd:99:4d:78:78:cc:21:f5:a1:ce:6c:
1e:01:a0:d7:f1:51:d8:b9:4f:50:8a:07:11:cf:e8:09:02:75:
eb:2d:16:38:03:8a:37:d8:42:30:87:00:5e:04:be:26:fc:f8:
bc:e6:5d:dc:6a:b7:07:ff:d6:c7:85:c3:a5:ce:ff:a3:97:9b:
b0:05:b7:0f:82:94:c6:97:99:81:20:8f:f3:b9:e2:f4:4c:d5:
5b:f3:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:08 2025 by rpki-client