Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a852059-a7de-35da-950e-749d43c2ffa0.roa
File: 7a852059-a7de-35da-950e-749d43c2ffa0.roa (raw, json)
Hash identifier: kwlhPTS4kEt/ifV9Z5aUEmwKc0uLlm07HVmf/Bje0SM=
Subject key identifier: BA:9E:A6:55:76:CF:85:3A:92:97:00:B0:C6:E1:77:06:FF:65:A6:AF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF523D7E86D2FB77A05E34D60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a852059-a7de-35da-950e-749d43c2ffa0.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 161.193.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f5:23:d7:e8:6d:2f:b7:7a:05:e3:4d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=2857391d-f6aa-4479-a579-c7069189ae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:83:7b:9e:88:14:67:90:89:46:ae:36:96:
5c:65:1f:a6:5f:0b:2a:20:cb:a9:22:2c:5c:00:d8:
c3:e6:b6:d4:c3:7e:96:50:63:29:84:91:58:01:2f:
f8:bd:78:a4:6e:ac:ed:35:72:92:89:74:88:21:fe:
b7:d7:ce:10:91:56:76:38:15:84:4c:ce:59:3e:d8:
e0:67:f6:0f:44:49:f2:a9:fc:be:34:73:5d:13:1c:
6d:12:1e:40:ef:47:35:1c:57:ba:4c:e1:84:00:f8:
4f:87:2f:56:69:4b:0b:bf:6e:04:5c:60:b4:26:83:
b7:d8:b7:b5:2b:02:a1:ae:4d:ec:7c:71:3b:5a:3b:
7f:9b:66:7c:ff:4b:4b:74:76:e1:5f:fa:8c:7d:07:
4a:cd:d7:36:fd:c7:0e:4e:ab:8d:d4:cb:b3:41:cd:
ca:34:15:6f:d9:60:cd:2f:0a:4d:cb:99:33:07:fc:
d4:a4:eb:74:dd:9f:e4:3c:5e:b2:39:9e:4d:dd:b5:
a1:eb:0a:29:6f:25:c1:52:4c:79:96:42:8e:c2:78:
0c:39:06:07:2b:0c:51:0e:b2:71:97:38:3e:90:e0:
2c:91:a8:0d:ea:b8:93:50:87:4c:7d:59:67:0f:f6:
85:90:95:96:39:35:8e:09:2c:04:31:8a:80:fd:72:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9E:A6:55:76:CF:85:3A:92:97:00:B0:C6:E1:77:06:FF:65:A6:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a852059-a7de-35da-950e-749d43c2ffa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.193.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:2c:d6:df:95:ea:c0:0b:0c:27:21:b0:d7:de:5b:47:8f:75:
23:56:dc:2a:df:05:92:d4:6d:78:6e:b7:87:67:bf:df:45:66:
0c:dd:44:a5:c9:8b:fb:d9:b4:b1:91:ef:d4:7c:95:0d:ae:4d:
de:7b:86:c1:b8:cc:88:52:31:2e:30:98:6d:15:c1:81:fa:3a:
8f:bb:21:f0:21:ab:21:70:05:a9:9b:a2:9e:6e:c9:6b:8f:d8:
e8:95:76:73:25:ed:16:85:6b:8b:d5:ef:01:39:ab:9f:f7:b9:
e2:98:17:bc:f6:c7:a7:f5:f7:50:d0:52:39:39:92:5e:24:2b:
31:ee:21:c7:3b:88:05:7f:28:42:26:7b:6c:fe:8c:ba:0d:a5:
75:00:22:7b:41:63:e2:7e:47:4c:dc:8c:15:4d:5c:60:35:63:
40:68:81:4c:cb:dc:f8:3d:41:eb:c2:1b:35:1d:1c:25:2e:c6:
71:6a:a0:04:f3:b6:66:fa:6e:eb:d3:fc:ca:11:fb:64:34:dd:
01:89:cf:dd:09:5a:7c:a0:b0:1c:63:6e:29:e9:3c:ca:73:3e:
75:97:1a:cb:4d:cc:22:95:fd:f3:51:82:bd:ef:04:7a:c1:cf:
7e:8a:26:ca:02:31:23:f0:dd:0a:3f:5e:3f:e8:95:f7:07:6d:
94:b1:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:26 2025 by rpki-client