Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79f96a75-2138-38fa-86a4-988dc35b0a3f.roa
File: 79f96a75-2138-38fa-86a4-988dc35b0a3f.roa (raw, json)
Hash identifier: gJ9gbdmPu9P2ZB9yRrYIYJ1tzrYOCL6l2sbGshbWk78=
Subject key identifier: 82:96:5E:0E:64:EE:B7:94:E8:6E:27:08:A1:15:FA:3D:D3:97:9A:A2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8AF04DD38C5E95E2D2CDFF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79f96a75-2138-38fa-86a4-988dc35b0a3f.roa
Signing time: Tue 11 Oct 2022 18:48:07 +0000
ROA not before: Tue 11 Oct 2022 18:48:07 +0000
ROA not after: Wed 16 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8a:f0:4d:d3:8c:5e:95:e2:d2:cd:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 11 18:48:07 2022 GMT
Not After : Nov 16 05:00:00 2022 GMT
Subject: CN=8f2c6b1b-ce2f-4dac-94ba-92511d81068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:ad:05:43:7d:5c:84:f6:7d:18:c3:21:ec:
2a:27:1d:91:f6:4f:35:fc:fe:33:dc:cb:2e:f6:be:
07:86:41:fb:fd:a9:43:7b:86:5e:3e:2f:f3:0d:35:
b0:88:e9:ec:89:41:c2:2e:40:51:7f:04:75:16:d0:
2e:70:9f:2e:bd:67:94:68:78:0b:5f:6d:79:01:15:
68:05:73:29:85:b5:b6:e8:81:95:fa:15:9a:46:23:
6f:3e:d1:e5:af:55:10:79:17:37:52:de:23:98:a4:
04:46:b0:08:96:7c:2d:eb:45:e0:83:41:49:36:f2:
ab:53:99:d3:53:d4:20:01:16:87:7d:bb:4f:08:d2:
df:28:b8:ca:b7:82:59:6d:56:d2:d8:15:73:09:cf:
47:a3:2c:d6:8b:bf:89:f5:2b:91:5c:e3:01:e7:24:
c1:60:f6:61:3b:1f:7a:e8:82:23:84:76:00:ad:41:
68:00:ff:06:99:96:c0:30:3b:b8:70:c9:be:7d:9a:
37:de:83:ba:1d:60:6b:33:d2:b1:fe:93:46:52:2c:
38:0c:29:f0:0d:7c:50:06:26:74:5d:6e:b9:ef:d2:
10:24:da:9d:b6:4a:e8:d5:57:f3:f2:41:6b:7e:42:
5e:63:2f:19:56:fc:d5:26:cf:74:bb:ab:b4:14:de:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:96:5E:0E:64:EE:B7:94:E8:6E:27:08:A1:15:FA:3D:D3:97:9A:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79f96a75-2138-38fa-86a4-988dc35b0a3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:72:89:3f:54:9f:65:50:a4:98:b1:d2:06:1f:a5:16:d6:08:
83:88:35:9c:45:a1:38:b4:b7:0d:92:eb:8c:30:fd:98:bd:ff:
31:39:27:5c:2d:27:33:00:b2:64:71:2c:ee:4f:b1:fe:9c:d7:
18:63:4a:bb:89:49:39:0f:a9:9b:52:af:e8:c2:0b:4d:d2:cf:
24:ba:f3:6a:c7:1a:b5:f4:a8:5b:ae:53:f3:1d:8f:31:0a:19:
bb:eb:10:e8:86:de:3b:e8:99:40:ce:0e:87:e6:dd:6b:1e:70:
43:b1:96:de:c3:2b:8f:0e:08:f2:a8:95:3c:8f:18:be:2e:4c:
19:81:9d:86:7a:80:6c:8a:f7:d8:26:72:4f:15:5b:3b:cb:8d:
43:79:cc:8f:8e:bf:0f:db:2f:10:fb:a4:c2:12:49:96:c8:70:
fa:80:94:ef:81:f3:d0:bd:3b:c8:9a:e2:a8:99:dc:ef:74:a1:
58:ab:7d:25:34:55:a8:04:64:b0:38:77:79:fa:de:af:56:7d:
8c:60:7c:6c:b6:29:e8:b3:ed:26:46:b3:b3:80:c8:86:c4:fa:
f6:82:35:ab:9d:ba:cb:ba:85:95:af:b4:ce:75:7d:83:e6:90:
b3:79:76:f5:a0:7c:f9:4f:ed:a6:2f:96:bc:be:98:a2:23:5c:
10:1d:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:08 2025 by rpki-client