Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a156180-9a91-327f-b158-059afde6f27e.roa
File: 7a156180-9a91-327f-b158-059afde6f27e.roa (raw, json)
Hash identifier: Nsj2PvVNtsVlu2/vmJ/Oqk1S4o46z1K0uhhOzMHkbSc=
Subject key identifier: D1:EE:2A:9B:74:CA:6C:CC:DE:9E:E3:E1:95:F4:F3:F9:E0:2D:AA:5F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402456B19255B5C25610F77400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a156180-9a91-327f-b158-059afde6f27e.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 167.243.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:56:b1:92:55:b5:c2:56:10:f7:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=eeed6a56-64f2-47cb-94ab-ae4c50080000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:ac:99:79:f5:b0:ec:aa:9c:db:6c:5a:e3:
67:b5:63:3d:92:e2:2b:e8:ed:b7:77:0d:6c:cc:47:
a1:ae:63:bd:11:8b:39:fb:35:ba:fe:86:da:21:af:
e4:36:bd:35:c9:fb:3f:93:e6:ed:d4:b9:a4:7f:9f:
31:13:9e:b8:eb:85:b6:93:b2:58:27:52:1f:22:c3:
c4:f2:bc:13:11:1b:27:a1:4d:b0:9e:67:31:8b:a4:
bb:c4:42:bf:78:5e:93:a9:90:73:87:55:2a:3c:b8:
0b:fc:40:c7:68:8e:a8:89:7a:db:fc:a3:fb:8d:3e:
21:6f:42:9f:cc:6f:85:cf:67:b6:5e:d9:c9:20:f3:
24:e7:52:55:30:a6:6c:0f:9b:da:be:85:47:20:55:
2c:6e:ac:1f:5d:c1:9c:6f:fc:77:7b:a8:0c:c2:ac:
3f:94:1d:31:11:78:6c:92:fc:d9:ea:9b:5a:6e:5f:
c6:79:69:7e:3d:59:d9:9b:da:0e:78:15:80:3e:da:
44:80:47:dc:c9:b1:0c:07:0d:ec:02:05:b3:c5:a7:
de:8c:b4:9a:07:d6:22:a7:bc:37:d9:1f:11:de:27:
11:be:47:9b:ee:f8:9b:73:ed:1f:15:52:29:bc:af:
1d:85:a6:bc:20:07:c6:c7:76:9d:54:28:76:85:2d:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:2A:9B:74:CA:6C:CC:DE:9E:E3:E1:95:F4:F3:F9:E0:2D:AA:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a156180-9a91-327f-b158-059afde6f27e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.243.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:75:b1:86:90:af:45:3f:b8:44:78:51:b4:a9:78:d4:24:4a:
8a:9a:da:9a:2a:c3:1f:82:86:67:b8:7b:55:56:26:bc:44:a6:
9a:49:1c:8c:1a:5c:15:62:fa:46:77:ce:fc:30:73:46:32:fd:
ab:66:92:e9:8d:f0:e4:26:58:3a:e2:c9:f8:53:18:df:e6:d0:
b3:3e:af:41:b5:0e:9f:f0:34:9d:04:7d:50:09:96:06:f6:b4:
b7:a1:14:1f:a5:9b:e8:26:5e:3f:f9:8f:b8:c6:3f:c4:a0:a5:
87:07:ff:63:23:91:c8:31:2a:61:37:66:83:c9:58:8d:e5:d1:
08:89:99:71:58:a6:c9:ac:5b:11:02:53:49:8a:7a:d0:f3:84:
26:00:4f:02:ba:96:ab:a0:97:18:e1:af:9e:35:da:d1:20:a0:
66:93:ae:43:26:2b:43:ca:4d:df:dd:4e:ca:39:78:cf:d6:1e:
b7:44:9d:08:a5:56:54:45:55:47:8d:23:24:df:1d:5a:7d:1f:
b5:70:a3:55:17:4a:ee:a7:4c:e4:be:1a:2b:86:16:bb:7b:18:
71:ac:ff:de:f8:19:f7:76:94:9e:1b:bd:a3:fb:84:68:44:09:
43:c0:99:a4:36:a2:1c:49:b2:ce:45:b7:1d:4c:d5:ef:09:0b:
0c:aa:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:49 2025 by rpki-client