Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ab31fff-6d91-3989-887a-cbfb990be3a0.roa
File: 6ab31fff-6d91-3989-887a-cbfb990be3a0.roa (raw, json)
Hash identifier: y0Dj2UxAP42IHLJraXmQC2f7Ew8otCWnKa37av+Fr1A=
Subject key identifier: D4:32:AA:F4:1A:2B:54:1A:AE:D9:5D:92:43:E7:56:32:E9:BF:70:1C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584072894AC77A541032FCC5C5E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ab31fff-6d91-3989-887a-cbfb990be3a0.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 167.243.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:72:89:4a:c7:7a:54:10:32:fc:c5:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=355e649d-7401-40f6-92ba-b07ec4f6ada3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:c7:2c:9b:e4:25:5e:d9:82:06:18:81:5c:
be:31:d9:77:cf:6f:5e:73:db:dd:9f:36:e7:3c:56:
ea:6e:eb:9a:06:4a:61:b4:52:9c:78:b1:ce:1d:d2:
1a:db:dc:db:3d:9c:14:81:03:91:66:52:ce:67:2a:
a5:6e:92:d4:4e:2d:d8:2b:05:03:a1:bf:b7:7a:3b:
41:6f:bc:66:a8:8d:e4:cd:fd:2f:f3:db:b6:5a:9b:
95:81:08:40:68:f8:d6:7b:fb:ab:3f:51:dd:7f:4f:
b4:72:b1:41:57:ca:ef:d1:8a:0a:cb:98:51:59:06:
cd:c8:da:1d:61:53:22:bf:dc:90:1a:8c:9d:52:aa:
e7:5d:42:cd:ff:9f:0c:9c:11:cc:46:e4:be:a5:70:
23:47:ea:d6:a7:76:f8:aa:87:0a:80:54:19:ee:b3:
a7:f1:b5:33:37:80:d7:c7:4e:43:6d:1f:5b:fc:71:
72:60:c9:8c:b4:3f:51:71:ea:ce:5e:53:75:cb:e4:
9e:2e:65:f5:1e:81:bf:33:85:01:2d:c7:cb:fc:39:
ec:b9:ed:be:c1:b0:a9:d0:e8:8d:fa:7d:a0:71:19:
78:31:8a:f4:53:6d:46:76:b0:9f:d3:2c:b2:aa:aa:
c4:62:c2:84:34:c3:a1:a0:fe:89:60:b0:5e:9c:9d:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:AA:F4:1A:2B:54:1A:AE:D9:5D:92:43:E7:56:32:E9:BF:70:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ab31fff-6d91-3989-887a-cbfb990be3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.243.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:dc:44:a6:f8:16:11:13:8b:78:56:86:78:3b:cb:c9:b4:fb:
17:a2:a5:82:19:52:c1:46:a9:b5:30:04:10:39:61:9e:f0:cf:
15:64:89:ee:59:5b:ac:4b:20:01:e6:bb:c7:65:9c:45:a1:74:
45:8c:0b:4c:40:f8:90:e1:85:48:19:c9:02:11:f8:ed:fb:46:
fa:b5:26:07:72:cb:0c:e1:df:ed:9c:bc:ce:6d:60:a2:2e:4c:
3c:ce:a2:df:6e:45:7c:e2:1e:27:d3:82:0b:57:12:75:9f:fd:
21:cb:cc:1e:a0:b7:cf:55:fd:20:14:32:10:93:7d:49:7f:b8:
94:1d:bc:02:92:fd:09:28:de:a0:27:84:9e:92:3b:3c:97:e9:
45:87:3a:32:38:0a:ec:a7:d3:0a:77:ce:c8:90:9b:c4:02:90:
ce:3d:ed:ae:57:d9:3a:04:b8:5b:90:00:42:f0:0b:35:1b:1c:
a9:89:ef:9a:b2:e9:a7:84:21:f4:b6:2e:7e:8a:bd:c4:19:08:
f9:a2:f2:dc:83:eb:55:37:70:2e:ee:57:8e:80:8d:05:e3:99:
3a:85:7d:bc:c9:46:ba:1e:5f:4f:11:82:af:07:f2:98:01:8a:
16:75:65:d1:7e:75:42:65:0f:3e:2b:54:6e:61:93:56:ed:c5:
9e:c6:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:54 2025 by rpki-client