Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6125b706-caf7-36ae-837f-ad609668efb4.roa
File: 6125b706-caf7-36ae-837f-ad609668efb4.roa (raw, json)
Hash identifier: DPEm2i+gGT/BKzJaHCp28sKT8QmjS/rMr/aafVfdpoI=
Subject key identifier: AB:FA:54:45:8B:73:48:C6:54:6A:12:3F:24:AE:27:9E:1A:DC:95:95
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400E355A1AC0ECF862EEAA6B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6125b706-caf7-36ae-837f-ad609668efb4.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 168.203.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0e:35:5a:1a:c0:ec:f8:62:ee:aa:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=2374b328-e13c-4212-94bd-85e6f6362bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:e9:27:72:7d:83:d6:44:95:cf:34:f8:b6:
e6:e5:35:f3:e9:74:8e:82:04:e7:22:a6:1b:45:12:
97:48:f7:6d:42:f6:a2:41:d7:df:19:c0:f7:8d:9c:
ac:a3:aa:79:66:16:1b:96:62:3a:1f:d8:ae:3a:2e:
e6:11:49:e3:ba:a4:fe:21:04:2b:5b:1f:71:ef:71:
ef:cf:ff:61:fd:45:38:24:3c:75:ce:9d:1c:ee:8c:
f7:72:bd:0e:50:bc:dd:62:80:f1:e2:55:58:0f:55:
4e:83:36:9b:81:9d:f2:c7:20:2c:88:b4:ea:51:0c:
d5:aa:d6:90:2a:69:a7:94:73:38:bd:f2:b5:a3:33:
f6:85:85:08:33:d8:10:7d:1a:8a:98:5e:2d:d4:c5:
b4:1a:88:f8:80:42:e6:64:76:d2:62:c7:3a:31:b3:
5d:b0:8a:21:ff:54:59:75:a0:cc:f5:02:9f:91:1c:
9f:5c:4e:9b:b1:36:c3:b1:12:71:79:9c:7e:cd:b9:
9e:cc:36:35:f1:0f:c2:95:ab:cd:9e:fd:a4:c1:49:
28:d0:69:9a:9f:22:e3:55:dd:d2:07:88:b3:63:36:
4f:83:f1:c0:59:bc:45:70:9e:7e:34:ae:1b:84:46:
5c:2a:43:d7:91:3e:1f:9d:72:55:24:46:9b:d5:60:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:54:45:8B:73:48:C6:54:6A:12:3F:24:AE:27:9E:1A:DC:95:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6125b706-caf7-36ae-837f-ad609668efb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.203.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:af:56:08:ab:e2:f9:b6:5b:c2:d1:bc:6e:f5:da:be:97:23:
5b:7a:56:a8:ed:e3:a8:8e:06:0d:90:9e:25:cf:3a:5b:cb:44:
f5:3d:1f:cd:17:c5:e7:36:c0:fd:f5:ac:7b:e2:7c:f8:35:42:
33:a2:ff:9a:43:f8:b1:ba:82:cc:7a:ef:cb:2f:42:51:eb:22:
68:c6:99:1f:cc:b4:66:b4:99:8c:73:dd:aa:ad:ee:8f:75:1b:
83:d2:00:67:78:b7:e0:21:90:ad:55:5f:c8:02:ff:29:ac:2f:
e7:c6:a6:d7:3b:41:3d:cd:56:ff:78:20:9f:dc:6f:f9:70:60:
0b:aa:62:1b:ce:a2:f8:d6:67:22:7a:23:a0:bc:aa:cd:fd:f0:
5a:14:8c:db:6a:dc:bc:39:7e:7d:9f:11:c1:cd:cd:dc:8a:40:
86:42:1d:43:5d:a5:33:6c:b7:dc:52:2a:a2:12:a3:5c:da:dc:
b9:80:46:77:78:cc:18:42:bb:3d:bb:1e:5f:34:18:70:b8:f4:
c0:c1:e9:76:fa:d1:81:69:28:b8:e1:7b:7b:60:7e:97:13:7a:
c0:0c:00:3f:d2:83:cc:ac:8e:a5:01:72:76:36:4d:59:6f:8a:
2d:e4:79:b4:f8:5d:f6:64:94:85:50:70:49:71:8a:eb:78:b4:
bb:03:3d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:23 2025 by rpki-client