Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8242459e-6343-3f69-af41-534d25bf532b.roa
File: 8242459e-6343-3f69-af41-534d25bf532b.roa (raw, json)
Hash identifier: +SzseEwp+aMl2IAqMBGS+rYcWtdsuEw/XEB4UU6ojZI=
Subject key identifier: C9:25:15:CE:80:38:F5:65:66:0C:99:E3:44:EC:F6:13:3B:15:21:98
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400E10191DEEBD2E6FBAF16DE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8242459e-6343-3f69-af41-534d25bf532b.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 158.252.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0e:10:19:1d:ee:bd:2e:6f:ba:f1:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=0a0f81b7-34cf-4496-95eb-b26e2fc7ae14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cc:5c:75:db:13:b0:03:24:b7:f3:ac:34:21:
bc:5e:12:c7:cd:0a:59:8b:1b:28:f5:7e:32:4a:6f:
69:ee:bd:85:98:ee:e4:f4:cb:5c:c9:91:cc:c6:b2:
df:36:c2:dd:1a:ff:c8:c1:1f:4b:20:b3:de:1e:50:
27:29:e3:72:bd:f4:26:9d:cf:eb:07:32:07:14:03:
71:30:57:16:37:0b:3e:21:e1:af:84:9f:65:a0:ab:
6e:f4:2d:ec:12:67:3f:c2:a4:8f:49:dc:30:26:45:
6d:6f:71:de:1b:86:c4:2a:f3:cf:28:b8:2a:6a:bf:
ed:ad:b7:86:66:98:1d:17:3e:51:5d:a1:fb:8c:d7:
25:9b:a7:86:4b:cf:36:19:ee:af:29:9a:d5:3a:ec:
97:2f:ff:ee:67:49:a0:57:76:e3:dd:93:5a:ab:31:
51:66:29:24:2f:60:6a:a2:f8:c4:3d:50:58:7d:96:
2f:bb:14:ad:4f:42:a5:4a:65:d5:d2:b4:0d:60:84:
80:15:48:19:aa:08:f8:84:62:58:68:70:3f:63:ba:
40:0c:52:a6:a8:cf:12:63:4d:71:2f:ef:da:a3:9f:
75:1a:58:56:5d:ef:3f:13:3c:92:0a:f2:27:f6:34:
75:cf:32:98:93:03:3d:9e:2b:92:9a:34:b6:0c:21:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:25:15:CE:80:38:F5:65:66:0C:99:E3:44:EC:F6:13:3B:15:21:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8242459e-6343-3f69-af41-534d25bf532b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.252.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:0d:7d:d6:fe:ce:70:96:60:32:d4:5d:c2:12:fb:60:d4:54:
af:81:cf:40:3f:00:aa:47:0e:53:5d:90:5b:05:b6:7a:37:c6:
6e:c6:86:86:35:49:b4:84:35:5e:8e:e7:96:dc:98:97:a7:30:
46:ff:43:a7:15:3c:0a:87:25:a5:e1:64:59:af:5e:2d:53:ff:
ff:a8:b1:1b:b6:9f:d2:26:d7:da:94:af:35:fd:1f:18:e7:af:
dc:eb:e9:fe:62:e7:8f:bb:e5:9b:f6:28:dc:3a:3f:6a:21:a0:
37:fc:13:5d:c5:28:b7:a1:41:61:5e:e6:52:e8:5c:7f:ff:52:
dc:21:b4:e7:c9:8d:15:40:f5:16:c3:31:b2:ca:96:c3:04:df:
7f:c0:65:ff:80:67:31:01:2c:bd:11:38:91:1e:45:68:ec:fb:
3b:65:0a:c2:38:0b:60:d0:2b:5c:93:06:d4:74:a5:50:d9:4b:
dc:5e:58:5f:36:78:f0:f3:43:3b:8f:30:ed:12:9f:47:65:c9:
d5:3e:b6:db:45:e0:6c:4e:33:bf:56:ca:d6:a9:bc:e4:03:02:
79:bc:c6:5f:bd:8a:6d:da:1f:7a:17:40:b8:3f:6f:b2:47:ca:
d9:c7:49:9e:d8:da:92:a4:77:32:d7:21:54:57:26:e8:ff:3b:
6f:d5:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:24 2025 by rpki-client