Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f8b1103-c77e-3c23-9f88-5f856b9ecc85.roa
File: 7f8b1103-c77e-3c23-9f88-5f856b9ecc85.roa (raw, json)
Hash identifier: +20LE2FunLB7gKq4WeB2o+jUN1CeSOV+IIGb/kA4T4A=
Subject key identifier: 59:CF:D6:26:C7:D2:F8:54:CB:26:72:46:99:77:98:BE:43:F2:12:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584021A9B7B49508C828F91B7600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f8b1103-c77e-3c23-9f88-5f856b9ecc85.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Mon 09 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:21:a9:b7:b4:95:08:c8:28:f9:1b:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Jan 9 05:00:00 2023 GMT
Subject: CN=420c9d6c-56cd-4cfb-903d-c62151688120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:89:02:27:30:cb:71:17:93:df:82:2a:ad:
95:ab:ee:a0:78:b7:f2:bb:54:66:6f:05:05:71:ac:
1c:c1:ab:e2:be:c7:82:59:1f:d5:9d:52:cc:83:15:
cf:6f:11:f5:5c:27:35:90:8a:2d:2f:6b:dc:03:c7:
a9:58:3d:d7:bf:6d:2e:1d:ec:d8:85:35:d8:1d:c1:
8d:8c:a5:7d:45:e8:b8:db:3c:17:b9:e9:fb:59:18:
3a:2e:a5:2a:37:47:f0:e2:30:e0:78:0d:3a:76:ab:
6c:23:e4:0d:11:d1:91:19:e1:7b:86:73:c5:15:45:
c9:60:fe:68:90:28:2e:a5:0f:98:59:47:e1:a4:e4:
bf:a1:be:21:a1:c7:59:ed:de:fa:d2:16:19:0f:9f:
05:af:8f:02:ed:8e:22:de:0d:a0:9e:b7:79:ec:2f:
71:8c:68:16:9a:fa:11:76:62:ad:de:06:11:8d:92:
f0:24:a2:38:29:5f:b3:a6:47:8b:b8:9d:3d:93:9c:
3e:4b:d0:0b:08:29:8a:78:3d:ee:97:b0:77:a7:55:
e8:91:25:b0:7e:b0:f7:3c:11:8f:d9:f7:76:3e:ea:
81:03:db:c2:da:f8:74:0c:b2:a8:87:49:56:bc:0e:
12:a0:11:af:e7:32:e0:4d:4f:9f:94:bb:1b:e0:18:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:D6:26:C7:D2:F8:54:CB:26:72:46:99:77:98:BE:43:F2:12:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f8b1103-c77e-3c23-9f88-5f856b9ecc85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3f:04:4b:86:44:12:af:3d:c1:c3:f3:e7:c0:85:fd:81:f7:
b8:00:28:3c:42:f7:d5:e8:42:ba:26:ed:e3:d5:14:79:5e:c0:
e2:ad:bc:61:e5:21:5d:20:11:03:e7:fe:1f:ba:b6:13:ee:34:
5e:0d:e1:de:44:e1:f8:a1:70:b6:71:6d:f9:78:92:59:67:fd:
6a:df:3d:e5:ba:36:75:f8:2b:9e:a4:82:20:34:5b:57:d1:39:
12:08:be:c3:3b:55:88:36:22:4b:ce:8c:2c:35:31:7f:09:1f:
64:aa:96:a3:99:4e:45:1c:32:0c:69:70:f5:fe:f7:26:bd:da:
b5:8c:65:fd:d5:e9:92:23:9d:a2:25:25:cd:8c:65:79:91:89:
8c:3c:2a:b5:a7:f9:a9:21:6c:9d:8e:c2:57:a4:3e:9e:29:ce:
7f:18:ce:a9:16:c2:2f:88:d9:e1:4b:44:97:3a:02:9a:69:08:
a3:15:d2:63:d4:25:8c:73:69:1b:0b:ff:e0:3c:c0:70:fb:09:
87:4e:6b:61:1b:ad:95:ea:03:60:33:df:e7:ce:27:de:f1:b1:
69:24:d1:3a:84:fa:d5:a8:5e:6f:25:ce:f2:68:e4:28:b0:8d:
b5:ca:fd:43:49:84:2e:68:3c:3b:8b:be:a7:f8:c0:b0:f7:3f:
9a:16:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:42 2025 by rpki-client