Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5373e2a5-c198-356b-a4b7-33caac191f95.roa
File: 5373e2a5-c198-356b-a4b7-33caac191f95.roa (raw, json)
Hash identifier: HbrxZnVJuwNZ7Y/zAQtYyDxLLIPjLouq+KsR9uvXkCk=
Subject key identifier: 4D:72:33:12:17:94:D0:5F:68:23:B5:44:8F:47:39:4A:80:6F:39:D4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584014063A50F24E0F04F268BD40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5373e2a5-c198-356b-a4b7-33caac191f95.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 167.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:14:06:3a:50:f2:4e:0f:04:f2:68:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=4c1d88a6-f32a-4db2-a47b-bd84e249c454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:14:46:74:cf:eb:0b:14:8d:31:e8:b0:6b:
aa:16:7a:33:19:6e:d5:c5:41:d8:f2:b2:24:19:e9:
ba:e4:b6:4f:78:3f:32:dd:5a:f8:36:a8:b9:21:83:
38:e1:4d:fa:4c:61:5b:2b:75:1a:02:a7:4e:98:00:
af:2a:36:79:9c:fa:b3:a8:2b:37:81:39:19:b9:b6:
85:47:1e:95:62:c2:a8:d1:3c:49:c2:d9:1f:96:21:
ca:9a:ee:c9:34:d2:70:58:44:79:c6:4c:32:74:84:
1d:04:ab:f1:36:db:d9:6b:33:4d:b8:e2:41:30:f7:
14:07:92:8a:d2:30:56:60:a8:6b:7c:6f:b1:0a:f3:
7a:33:14:5a:fc:6c:34:52:0d:43:eb:45:46:e8:3f:
7b:5f:37:c1:ca:45:41:a1:bd:e2:dc:aa:64:be:71:
f4:5e:db:dd:f5:03:f0:03:4a:4f:38:05:a9:07:77:
fe:6a:82:6d:d7:16:d8:79:76:21:5c:42:6c:07:6e:
ab:98:21:5e:be:f1:bf:1b:64:2d:d8:ef:ce:4c:c0:
65:fd:a8:4c:df:1b:05:ec:6b:ba:57:d1:35:f2:8a:
f7:73:07:96:08:15:5c:26:2c:5b:ff:6f:c0:f7:21:
08:e5:86:4e:8a:83:95:ac:32:47:00:33:2a:44:43:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:72:33:12:17:94:D0:5F:68:23:B5:44:8F:47:39:4A:80:6F:39:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5373e2a5-c198-356b-a4b7-33caac191f95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7f:f7:54:e2:ed:c3:d9:9b:28:c2:02:e4:8e:ce:6d:75:af:
f8:3e:e9:4d:49:93:b1:76:1b:3c:be:5d:a9:91:f0:54:a3:16:
59:ee:d8:4d:70:f6:27:1d:65:ca:b3:7e:b6:b1:a9:49:bc:59:
50:cd:32:dd:5c:b0:e8:bb:77:26:f7:75:db:3f:b1:0e:89:19:
1e:6c:90:83:ef:4e:3d:29:9a:5a:d8:cb:ab:f2:d4:72:63:6f:
b9:13:04:d0:f3:5f:93:3f:b5:ac:80:0e:49:c2:fc:25:dd:0e:
51:cf:27:25:40:85:6d:4a:ec:0d:7a:99:98:d3:3c:ea:3a:73:
c5:29:54:67:f4:35:a4:66:d0:aa:67:5e:3d:9a:f7:25:3c:d9:
63:5e:0d:e2:8e:11:77:e8:3d:3d:16:03:a3:54:15:61:45:55:
61:70:0b:ce:59:d5:71:bf:76:46:4a:3c:73:4d:cf:cb:07:63:
b3:0a:e7:75:02:49:59:4f:14:f0:52:21:54:4a:2e:7a:d1:7b:
72:ad:f8:c0:a2:e3:3a:6f:03:aa:76:64:69:a3:78:4e:64:be:
07:11:0c:e1:69:ee:a3:c4:3e:a5:d7:fa:a6:78:04:cc:a0:3e:
6c:d6:da:7b:fb:52:a5:59:52:3f:09:af:7f:58:49:04:2b:3e:
03:e3:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:01:04 2025 by rpki-client