Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a40998f-2fe4-3b07-8aae-8d849b7ac756.roa
File: 6a40998f-2fe4-3b07-8aae-8d849b7ac756.roa (raw, json)
Hash identifier: 12QLnZiMBQroa7ZiQaOYVPcLUSvA5nJkvxFFUeytBK8=
Subject key identifier: 32:43:9D:7A:22:22:93:6D:0F:88:E5:B9:DF:6B:39:07:EB:A4:30:C9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFD9A2D9135984C666A2E26A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a40998f-2fe4-3b07-8aae-8d849b7ac756.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:9a:2d:91:35:98:4c:66:6a:2e:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=98a7849b-a2bf-4be2-89bb-720991101655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bc:32:76:0b:19:47:5f:25:94:33:03:7c:48:
fd:f4:ab:d0:ec:e7:46:cd:10:c5:33:05:46:91:7a:
a7:be:f3:0d:74:21:26:8d:f2:2a:b9:b6:5b:b6:95:
3b:75:b6:a3:72:64:4a:c7:12:55:3b:e2:5b:17:d7:
12:dd:6d:ad:ed:fa:50:a6:03:32:da:e9:f1:eb:38:
b0:33:f9:c0:df:f7:59:cd:6d:c2:04:93:27:a5:c1:
28:f2:8d:e1:34:49:c6:a6:0c:af:29:8b:32:21:a2:
81:66:57:79:69:11:a6:63:84:df:38:fa:96:78:dd:
c7:21:3a:e2:40:ae:a5:cd:83:2e:fe:00:70:ea:00:
f4:e6:9a:ed:b0:a7:42:28:a6:ca:e3:f9:e8:c6:1b:
d2:7e:27:e3:72:39:b1:8f:f8:c5:27:49:16:d6:83:
d7:5a:6c:df:21:c8:e6:b3:15:b2:f4:d3:79:bd:03:
84:1c:b9:4d:1a:71:5d:52:cb:52:47:3b:6c:43:ca:
8a:61:8c:4d:a5:fb:02:d7:12:30:2f:b2:9d:9f:ed:
9c:81:5d:44:e9:db:69:f7:ea:c6:be:29:3c:50:93:
a8:4d:1c:d5:9a:f6:73:18:ff:5d:05:3b:53:f4:36:
a2:a9:be:78:1c:26:6c:cc:07:73:7e:54:65:de:8f:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:43:9D:7A:22:22:93:6D:0F:88:E5:B9:DF:6B:39:07:EB:A4:30:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a40998f-2fe4-3b07-8aae-8d849b7ac756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:e6:d5:57:78:c9:0c:47:42:e8:f4:e2:ea:df:5a:d3:5f:9e:
8a:61:38:18:ea:b8:af:26:a0:82:29:17:7a:fe:f9:74:4d:05:
95:95:8b:12:77:d4:b0:21:1a:1b:1c:f1:61:54:bf:4e:3f:74:
68:b9:f9:89:94:15:30:37:5f:32:05:06:bf:2e:8a:92:f1:0c:
c1:c1:a0:7d:d2:bf:44:58:15:d4:5c:b3:e2:ed:f2:e7:0b:30:
21:38:68:d7:6c:dd:be:14:4f:b2:01:83:db:46:ca:86:9d:5b:
93:84:cc:75:71:28:30:23:fa:3b:06:56:28:75:70:8f:2a:22:
73:e7:8a:88:db:a0:d4:77:e5:06:2c:b4:8d:4e:2a:b5:e2:a6:
89:ec:c5:fc:34:7c:24:e5:31:0e:ed:53:65:02:07:b0:fa:48:
c8:04:ed:69:40:e3:fd:ae:76:92:8a:3d:8a:f8:e4:31:f0:68:
57:14:7d:98:91:5f:83:53:14:08:89:02:fb:f9:75:47:ac:d9:
2d:91:20:08:f5:9f:78:72:eb:af:58:ed:e0:9d:67:dc:1d:70:
bc:47:cf:e8:4f:f9:ec:15:a4:7c:fb:49:5c:24:fb:d8:c4:57:
f4:ff:3c:37:60:2b:5d:ac:d0:9d:81:50:09:17:2e:27:f0:65:
15:a0:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:39:38 2025 by rpki-client