Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/676dae72-3675-3883-aa02-fb7970ba89c3.roa
File: 676dae72-3675-3883-aa02-fb7970ba89c3.roa (raw, json)
Hash identifier: Lo8u9WAPmVN1109yoHJklXz+ut97baj40mLCuMupFL0=
Subject key identifier: CB:8E:9A:66:8D:6D:48:5A:F4:7B:67:26:34:30:7D:45:B4:09:B2:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFFD76D46A632B9A19D72BB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/676dae72-3675-3883-aa02-fb7970ba89c3.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ff:d7:6d:46:a6:32:b9:a1:9d:72:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=68d34fc1-c504-4a19-93a1-e242115ec3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:d8:2f:5a:f9:cb:ef:83:93:27:3a:5b:49:
c2:87:8c:4d:42:67:fe:6a:7f:3a:1a:59:82:05:ff:
12:9f:fd:05:6f:16:d5:75:54:09:ff:23:fe:02:44:
97:22:35:c7:c8:55:b0:92:8f:ee:bc:75:14:48:85:
06:9a:c1:2e:56:32:3d:22:a2:d5:d6:2d:63:8d:f5:
84:b7:98:2c:7a:b3:2e:1b:24:59:75:83:b8:0f:ca:
b1:39:4b:d0:d2:41:ff:b9:4a:25:83:e6:5e:a0:b9:
14:d4:46:d2:bc:4c:ee:0b:08:99:a5:a2:6c:ac:ed:
b7:1c:e0:2a:21:d4:44:b3:49:ca:b7:f2:01:9f:7e:
1c:a9:0d:6a:74:6d:8e:ca:84:5f:61:3f:fd:15:5e:
18:ab:9c:13:3b:0f:63:aa:b7:57:99:b1:d7:07:c5:
cf:33:90:97:75:fa:f8:e0:6f:b5:1d:53:5c:27:de:
58:74:13:7c:5c:5f:dc:7c:25:9b:29:71:c9:2b:60:
e5:ed:38:04:53:ef:22:ed:16:70:12:35:fa:6c:af:
85:11:37:9a:70:96:b9:32:f4:44:19:45:bf:c6:a6:
47:cb:99:1b:db:43:bd:de:cd:ce:c0:5c:39:48:7d:
15:08:09:1a:07:7f:89:b8:f4:a2:60:f7:03:6a:44:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8E:9A:66:8D:6D:48:5A:F4:7B:67:26:34:30:7D:45:B4:09:B2:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/676dae72-3675-3883-aa02-fb7970ba89c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e1:2b:9d:24:05:cd:b0:88:90:63:61:5d:0a:e3:bb:8e:21:
4b:9a:05:06:a7:1e:f0:9a:19:6f:06:79:45:f3:66:aa:49:56:
c8:76:23:29:72:9f:84:f6:ff:3f:2c:73:a2:4c:3b:82:40:a9:
87:74:83:d7:7f:bb:5a:a7:bd:d6:f5:e3:bf:9a:13:4c:d8:74:
3b:5b:4d:5b:f3:51:65:7d:96:ea:49:50:2a:e4:9c:03:b5:29:
0f:76:87:1d:34:d1:58:2b:dc:3b:4d:58:53:72:70:7a:e4:d8:
8d:b9:4a:5a:1f:16:b9:83:a9:01:fa:84:e0:ed:53:fd:e7:3c:
ab:41:50:36:9f:f9:1b:44:69:10:90:b1:a8:34:79:89:17:a8:
65:f9:f4:23:1b:f7:45:6a:bb:c7:eb:fe:8a:65:19:f9:eb:80:
80:57:aa:3b:48:1a:5e:00:6b:6b:d6:d6:27:4c:9f:22:10:10:
ec:d3:24:2a:73:e7:cc:23:aa:93:32:27:ab:c5:58:23:0a:64:
0f:20:71:4d:16:81:1e:c8:21:ca:80:75:4a:7c:92:7f:4f:6f:
a1:c7:80:17:83:2e:80:85:d0:1f:51:bb:3c:14:d2:56:a1:db:
5a:16:88:d8:42:9b:bc:8f:e5:88:48:49:54:6b:7b:4b:59:92:
4b:f9:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:47 2025 by rpki-client