Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a299e7f-ce56-3088-965f-6800706011b7.roa
File: 7a299e7f-ce56-3088-965f-6800706011b7.roa (raw, json)
Hash identifier: WVjtrNcUNslW4TEo3FhyC+Wnvg+iY8pTwW1r/19xZmA=
Subject key identifier: FF:8C:74:D4:13:BC:ED:1E:32:71:0E:D8:0A:D5:89:C0:D3:C8:8C:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584073598836EBEFE153149E8C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a299e7f-ce56-3088-965f-6800706011b7.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:59:88:36:eb:ef:e1:53:14:9e:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=26564c2a-ea12-4ddb-a3a1-01b244001c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:fa:de:83:df:d4:4a:00:d1:4c:69:82:d2:
3c:55:7a:02:4d:9d:42:16:b2:28:5c:ba:9b:74:54:
ef:f3:48:2e:6f:a4:02:6d:43:d0:60:85:cc:4c:75:
ec:24:32:e4:7b:cf:d3:53:53:21:c0:18:b8:12:20:
22:9f:e6:0b:08:04:e9:1d:a8:da:9d:1e:d2:22:0a:
53:40:ef:fc:15:5a:04:c5:12:c3:a7:a5:09:48:c1:
b9:ed:8e:85:f1:56:11:cf:cc:2d:70:51:b5:26:1c:
8a:74:d8:bf:23:02:fe:ab:1b:b5:b3:57:74:4f:d7:
b7:1e:e5:cb:3a:d5:f2:50:26:0d:f1:9c:af:08:bf:
18:81:ef:f6:60:07:72:42:84:bb:75:b7:52:2d:b8:
21:9e:33:a6:ab:a7:5c:9d:95:f9:e3:99:a3:87:c2:
e1:cd:3c:ed:b8:f9:42:40:54:d3:3a:ac:06:5c:c1:
f7:93:e1:bc:73:e7:34:55:80:7c:ae:a1:33:93:48:
5c:62:32:84:a4:54:a5:4d:cc:5e:af:98:48:5f:dc:
13:fb:89:09:ae:c6:48:aa:12:fe:fe:c7:42:3e:db:
87:6a:90:23:7c:24:75:36:3d:79:69:99:be:41:67:
9a:9c:3b:9d:93:14:c4:61:62:77:73:73:ba:84:23:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:74:D4:13:BC:ED:1E:32:71:0E:D8:0A:D5:89:C0:D3:C8:8C:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a299e7f-ce56-3088-965f-6800706011b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:93:e0:49:1d:f9:0f:c9:64:b5:7e:f9:4f:09:a4:a0:35:83:
3b:71:03:62:8e:7d:6a:ca:43:00:88:10:94:8c:10:01:cd:50:
d1:6b:6d:eb:1f:a6:f3:2b:8a:d2:dd:eb:78:d0:9c:fb:ff:96:
4b:e1:a2:e6:2a:45:20:ba:24:ee:61:cb:6b:58:1e:9f:18:dd:
4a:8c:13:71:0b:93:53:52:49:b1:cc:84:5a:c0:5e:d5:f5:ef:
f0:4a:33:b0:67:1d:4b:34:6a:f5:c2:eb:4b:78:84:8f:81:70:
55:e6:98:18:52:10:a1:98:14:33:13:33:dc:79:e6:af:11:93:
c5:99:d3:a9:ef:28:54:14:62:23:ae:45:b3:0d:92:b4:78:4d:
d3:be:b3:4d:03:f7:6c:d7:13:a3:82:22:28:2f:e1:65:28:2a:
a5:b3:1c:f4:b4:68:98:50:a1:f0:00:5c:1d:f7:b0:fc:13:9b:
25:5d:4f:cd:e4:f4:b8:4b:e1:1c:17:e3:4b:f1:10:51:84:bb:
ec:5a:87:85:f3:69:21:30:a2:15:88:82:c1:ec:d9:06:dc:69:
5b:11:a0:2f:b9:10:97:0a:8b:5e:e0:f6:29:d9:d4:a9:df:38:
f5:52:10:a9:e7:da:4a:aa:ee:21:8f:36:f8:9b:08:cf:5b:97:
25:44:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:21 2025 by rpki-client