Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d4fb932-3634-3827-ae12-d04850c2a21b.roa
File: 7d4fb932-3634-3827-ae12-d04850c2a21b.roa (raw, json)
Hash identifier: WD47FNHJ6Mt7wxREesAXCSW7dV21taz6Z8X07l+2qAQ=
Subject key identifier: F2:DA:EE:A5:E5:6A:A7:50:9D:B4:F2:C4:72:13:82:5A:7B:65:B0:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840865E708A7244CE948D531480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d4fb932-3634-3827-ae12-d04850c2a21b.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 143.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:5e:70:8a:72:44:ce:94:8d:53:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=3d0f8cfe-0b6b-4432-8cef-42027101c7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:5d:3f:53:a2:35:b0:dc:80:e2:b6:32:c1:
d2:f8:67:6e:47:80:87:5f:ac:84:29:19:4d:46:01:
97:0d:b0:22:43:8c:2a:2f:f9:fe:35:f3:be:10:32:
2f:a7:32:cd:7a:ac:43:d9:ae:c3:24:cf:96:7f:f6:
0e:34:1b:4d:fa:ce:01:36:e1:5c:6f:f1:7d:df:bc:
90:20:4a:08:88:59:b0:f8:b8:d2:b5:8f:1b:eb:82:
7d:2f:76:99:82:b1:90:20:43:82:f3:3a:4a:8e:58:
40:26:bc:04:e0:30:c9:53:91:cf:f8:3a:e2:4a:d6:
20:07:20:e2:87:87:30:a4:cc:72:67:e1:fa:2b:8b:
03:c9:41:04:5e:70:7b:02:b5:f9:70:ed:0a:d9:06:
c5:6a:f5:27:f4:60:fe:0b:b0:71:7a:63:3a:ed:4f:
af:bc:04:3f:2a:88:93:e2:ba:de:49:3d:63:60:54:
ac:e8:63:65:e9:6b:c6:19:d9:5a:e3:0f:25:ac:9d:
5d:e4:e3:9e:a9:da:fe:07:49:dd:dc:86:9e:6f:2d:
07:f4:d7:2b:38:10:44:53:bd:a4:93:85:84:e5:dd:
37:6e:cd:65:8e:c7:f3:01:16:e6:bb:2c:b8:68:5f:
38:97:ae:d6:2f:ef:03:e2:b0:ae:fd:b7:18:0a:7b:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:EE:A5:E5:6A:A7:50:9D:B4:F2:C4:72:13:82:5A:7B:65:B0:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d4fb932-3634-3827-ae12-d04850c2a21b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:7f:d5:e8:51:56:c8:a3:8e:c5:e1:cd:26:6d:23:96:b3:ea:
cd:77:6d:df:ac:df:4d:73:28:10:75:ae:47:a2:18:d8:34:3f:
ac:76:f0:ed:ff:51:9b:f5:e6:88:b3:cb:ca:28:31:94:93:75:
60:e3:a2:6b:a3:d1:66:81:ae:44:ea:c7:ab:46:6f:21:66:bc:
d1:a7:3d:67:0c:26:f8:46:db:f6:1a:f3:49:7d:cc:19:d5:d4:
9d:da:19:42:86:4f:fc:94:49:70:10:56:1e:51:50:7e:fc:66:
07:4a:0d:ba:72:e2:46:0e:bd:25:04:56:41:51:29:96:96:98:
bd:5b:76:05:b6:c5:8f:ca:4f:6d:37:af:74:59:20:a8:61:64:
79:cf:23:9e:72:61:7c:c7:0a:4a:87:cc:8c:39:30:8b:b7:f1:
d6:db:c2:07:47:2e:e3:35:23:17:ef:c8:d4:61:c4:c7:ca:b6:
a3:41:a1:f9:f1:e0:24:a5:07:92:30:a8:89:d2:24:68:28:97:
91:ce:be:54:b7:89:d0:85:c6:a5:01:cd:e4:2f:6b:8e:aa:d0:
b7:2d:a0:20:ff:4b:d1:0e:20:10:e8:54:58:6a:f4:78:ec:1e:
8a:5a:cc:1b:a0:bc:a8:94:d1:7b:34:cc:c7:7e:88:ca:50:b7:
ff:dc:62:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:40 2025 by rpki-client