Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59966e31-eddd-33db-b4f4-ed7a3b6fca11.roa
File: 59966e31-eddd-33db-b4f4-ed7a3b6fca11.roa (raw, json)
Hash identifier: bvmaO+xj2XyHiWvmgZmfivCqgYEl/iQg5ajHcRR9y0A=
Subject key identifier: 65:4E:02:F9:2D:A8:E2:44:46:2A:BF:A4:BC:2D:29:6D:C0:D0:7E:F4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E2C05ECA4D8CC76196567FF40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59966e31-eddd-33db-b4f4-ed7a3b6fca11.roa
Signing time: Tue 07 Jun 2022 12:00:00 +0000
ROA not before: Tue 07 Jun 2022 12:00:00 +0000
ROA not after: Wed 13 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2c:05:ec:a4:d8:cc:76:19:65:67:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 7 12:00:00 2022 GMT
Not After : Jul 13 04:00:00 2022 GMT
Subject: CN=8c63cf5e-1111-4d8f-a900-382d7ad20d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:db:ac:0d:bf:d7:bf:9d:55:56:27:51:8c:
90:9e:e0:20:56:db:0b:2a:13:74:b8:7b:c8:47:54:
43:bb:df:67:1f:a5:96:0c:e0:0f:7f:d1:59:a7:79:
ad:e2:93:f1:38:fb:72:ea:d1:c9:a1:e3:7f:51:48:
02:da:d2:8a:a1:17:4d:37:26:9e:4a:33:20:ba:fc:
25:bb:93:36:1d:da:fc:77:24:b3:fa:02:62:e0:7a:
bd:b3:95:dc:00:06:ea:c4:b3:5a:f5:12:ca:03:cd:
21:54:b9:2c:24:c9:88:2d:8b:2a:75:c2:05:4d:97:
57:d9:f0:0f:61:d0:e2:db:40:5c:dd:2f:cd:ea:9c:
24:1e:cd:e0:73:ef:1f:e1:dc:f5:9a:b0:6d:f2:88:
3c:94:fd:50:2a:d3:6e:54:56:95:36:e8:e0:d8:bf:
57:72:d6:04:5b:75:f6:3e:bf:38:8b:f5:ec:1d:78:
90:58:b0:a6:c7:b1:06:bb:d3:f2:2b:25:78:fd:ff:
94:c4:1a:af:04:2d:ec:10:62:b4:3d:1b:bd:5f:0e:
3d:75:e1:c4:ca:0d:d2:49:d3:ce:67:69:6a:93:cf:
1d:73:f0:2b:2c:7a:2d:26:65:5b:0f:9c:aa:40:26:
06:ed:91:d1:b7:7a:e0:c3:82:f1:55:d2:c1:a4:16:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:02:F9:2D:A8:E2:44:46:2A:BF:A4:BC:2D:29:6D:C0:D0:7E:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59966e31-eddd-33db-b4f4-ed7a3b6fca11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:77:f2:da:3f:29:35:e7:2b:6c:42:fe:ab:c0:e6:5f:d1:3f:
09:84:4e:c9:72:35:16:7e:bf:6c:1c:b1:0a:67:5c:9e:a7:51:
af:26:e3:ea:9e:48:0b:60:a6:dd:eb:b9:86:5f:71:f7:f7:93:
ce:8e:2d:cf:ed:30:80:85:cb:93:89:9e:37:2f:07:f0:49:54:
6c:69:8b:a0:f3:10:ca:cb:58:e9:27:f0:8a:ab:c1:7a:46:03:
d8:80:b8:3e:8a:f8:b4:89:66:30:96:ff:7d:d5:8c:9e:9c:69:
a7:fe:99:86:c0:75:2d:06:d8:ab:41:c6:72:5d:ac:79:77:c5:
43:33:14:60:73:53:b9:99:bd:ad:2a:ca:49:88:21:fe:57:5c:
61:7b:fe:60:16:a1:04:1f:37:61:7c:2d:55:56:c0:4e:84:de:
0f:97:a4:a9:1d:0d:ef:87:ba:30:d1:eb:5b:95:57:b9:0d:a2:
2e:44:31:6a:bd:dc:be:3a:eb:b2:2b:0f:00:e6:07:86:4a:1b:
86:96:bb:d6:7b:d5:03:71:49:c9:04:38:0c:e3:98:01:70:84:
21:6a:91:a9:a5:bb:59:cb:70:e7:a2:f1:43:19:f0:17:0a:50:
e8:30:79:c2:68:1e:43:5d:71:f0:66:59:22:ed:fe:f5:24:28:
68:f4:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:27 2025 by rpki-client