Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ca84f02-5a0a-37b0-8829-5b8733c8a4fd.roa
File: 7ca84f02-5a0a-37b0-8829-5b8733c8a4fd.roa (raw, json)
Hash identifier: qAgmhZ5vEwcW+v3EHkpkFTsRK8FDWW2lSckzDe73v5c=
Subject key identifier: B6:AC:F2:E9:55:48:4B:C7:AA:A0:69:16:4F:1C:C6:35:5C:14:11:12
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1E01AAB57BBE8500E05DFFC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ca84f02-5a0a-37b0-8829-5b8733c8a4fd.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:01:aa:b5:7b:be:85:00:e0:5d:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=c74718c7-e0da-496f-a56e-332098a3fe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:a7:7c:58:c3:31:41:cf:99:21:f4:69:5b:
43:7b:8e:54:de:09:02:0b:32:55:be:cd:2b:ff:58:
e4:50:a4:dd:55:af:50:7d:8f:47:3b:47:0b:5e:2a:
2f:6a:ac:88:38:fc:ef:7b:3f:2e:e6:81:82:30:fe:
c2:ef:f9:9c:d9:d3:1c:54:09:31:fc:f8:96:39:11:
c8:cc:03:95:02:7a:61:98:cf:6b:23:6c:5b:bd:ff:
2c:ec:77:42:48:a6:73:68:ca:31:16:bf:00:c2:56:
b1:57:4f:9f:c6:4d:82:4b:b7:04:94:b0:e4:24:f2:
00:7b:b8:b6:66:c4:9e:bc:ed:71:2e:31:b3:24:ef:
b0:81:18:9e:db:0a:b9:6c:e3:fc:12:9c:1f:96:c6:
ef:6e:6a:43:40:72:3c:ec:1c:b2:be:40:3d:21:00:
5c:c5:1e:3f:48:7a:ae:00:11:35:06:df:fd:c4:a7:
f0:99:da:af:9e:ca:6c:2b:82:f5:35:e0:57:ed:07:
f0:8f:43:56:4b:af:d4:98:9d:37:db:02:3b:0e:78:
46:13:c0:cf:bd:cf:b2:37:a9:7a:53:37:ee:78:c6:
55:aa:4e:e7:7a:a6:24:39:29:3a:bc:a0:63:0a:4b:
e1:f2:b9:84:bf:36:98:43:67:9b:3d:db:af:7a:e0:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:F2:E9:55:48:4B:C7:AA:A0:69:16:4F:1C:C6:35:5C:14:11:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ca84f02-5a0a-37b0-8829-5b8733c8a4fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ca:61:cc:bd:ea:e0:ce:5d:5f:b8:6f:53:7d:9d:de:e9:d0:
d5:18:cb:db:88:a5:dd:07:b3:b1:af:1f:43:cf:ab:86:84:f2:
e0:0e:e5:74:d9:91:79:e8:85:ef:05:4d:2b:97:29:1d:ca:6a:
47:51:7c:d2:f4:5d:f1:4c:a6:11:5a:42:2f:aa:19:8d:f6:0e:
2f:ee:a2:2c:c0:1f:3c:a2:eb:01:c8:59:d4:6f:a9:5d:f5:60:
25:11:fe:ae:c7:63:19:3e:10:99:e7:2b:08:01:8e:1d:0f:ff:
05:df:e4:be:46:1b:5e:4f:7d:62:3c:20:a4:aa:3d:5a:50:66:
94:37:0b:62:69:cb:3f:90:f0:df:62:b0:e2:8c:11:3d:ed:30:
a0:73:28:b2:39:dd:f1:5d:7f:21:02:62:8f:3d:dc:87:44:a2:
1d:e1:a7:74:5c:13:b7:1f:8d:2b:77:2d:b1:76:c1:e5:11:9e:
c2:15:42:4a:77:09:d7:55:03:02:29:c3:24:da:4e:f1:83:fd:
f5:f6:ce:47:17:04:ac:c2:13:36:04:79:4b:0c:09:ec:b7:fd:
c3:8c:e0:26:2e:44:83:37:5a:9b:65:05:a3:6a:99:63:88:af:
fe:c7:53:9f:0e:cc:03:1f:aa:12:32:cd:f6:6e:db:8a:93:31:
f3:91:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:02 2025 by rpki-client