Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53160b4a-3fc8-3e07-99dd-67e1ddff1506.roa
File: 53160b4a-3fc8-3e07-99dd-67e1ddff1506.roa (raw, json)
Hash identifier: rwSC1gFkaHIs4RwQc0S8XVWgroV0dmgLp7bcA8VvoNw=
Subject key identifier: 9D:CF:86:E8:E2:90:74:46:29:C0:84:80:4B:1C:D5:36:38:0C:AE:50
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408EF279506406C06F275B7780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53160b4a-3fc8-3e07-99dd-67e1ddff1506.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 57.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8e:f2:79:50:64:06:c0:6f:27:5b:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=f23a6f5c-aaa2-475d-ab2c-7558a44fca55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:6b:8e:a9:b9:97:ad:3b:2a:09:a9:d7:d0:
b9:f5:ad:6f:65:de:91:d7:fc:95:1e:60:b8:ad:90:
8f:cc:02:5c:e4:13:d6:d7:59:54:c5:64:ef:b9:ec:
39:34:a9:70:c5:f2:6a:97:e9:e1:3b:b0:ac:a3:40:
c0:7a:cf:a9:08:7c:f8:b5:46:e2:e9:0d:1c:e7:94:
a6:03:3b:2b:1f:f3:b4:dd:18:b4:e9:d4:61:54:af:
8e:aa:69:02:5f:06:ed:83:49:d4:c0:0f:14:b8:83:
44:d3:f6:72:3a:dd:24:31:b3:45:27:f0:22:2e:f7:
9b:e4:81:48:7a:93:36:db:b3:b3:b7:42:79:96:fa:
f8:22:cd:4f:de:f0:a3:06:b2:33:9f:c1:ed:57:b5:
8e:e9:eb:f8:86:dc:e9:b7:96:c3:17:d6:39:94:1d:
23:6b:7e:e4:14:8f:de:8c:6f:01:c1:5c:18:6e:f7:
3a:af:9f:8b:fa:7a:75:95:a5:29:41:cf:9f:a8:8a:
15:11:6e:19:7b:a6:00:6d:63:53:d8:b7:cb:a1:44:
3a:34:da:45:83:1b:a8:e4:18:d1:33:38:e9:ef:78:
61:18:fe:59:ad:19:f4:64:89:cb:d1:cb:63:52:9a:
ac:88:35:7f:dd:9c:e9:aa:e2:f9:d4:8a:d5:ba:de:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CF:86:E8:E2:90:74:46:29:C0:84:80:4B:1C:D5:36:38:0C:AE:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/53160b4a-3fc8-3e07-99dd-67e1ddff1506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
57.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:a8:49:0a:08:74:5f:bc:f0:23:dd:4a:1a:f2:f4:6a:36:84:
81:51:7f:4e:2c:66:92:b9:8b:3d:f4:02:88:51:73:fa:85:1e:
23:9e:06:81:b4:6c:29:78:3f:b2:2f:62:aa:ab:9c:12:1e:a1:
f8:c1:7f:9a:e6:8c:c9:aa:df:32:62:43:7b:cc:52:86:37:46:
a0:45:45:05:5b:45:4a:58:57:21:83:57:54:99:1d:96:73:a5:
5b:67:b8:b5:3c:2e:f5:76:29:b9:7b:93:21:ce:9e:af:ff:d8:
bd:52:76:0e:f4:ca:f8:6c:ff:77:5c:4c:c2:29:97:f0:c9:ed:
8a:61:db:ce:40:2b:70:dc:f3:96:68:1e:4e:cf:83:21:f2:9b:
d7:8d:d8:74:51:6f:35:02:ca:e2:03:be:55:43:35:59:21:b4:
8e:5f:10:a1:99:d2:2d:a9:72:cf:f1:58:be:b2:1d:33:a7:3f:
7b:a7:8a:02:58:8b:00:67:0b:ec:02:c2:e0:9e:db:f2:8b:9e:
02:25:1c:28:e6:57:20:37:4e:6f:56:a9:3e:20:85:d5:53:92:
a7:3f:e3:d1:66:78:fe:f2:48:56:42:db:c1:38:42:a7:d6:ba:
e2:2e:14:57:b6:76:35:7b:ca:41:b1:80:5e:24:3f:41:70:f2:
72:53:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:18 2025 by rpki-client