Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/840091b5-12a5-3aac-b2ed-ec2de45e2b82.roa
File: 840091b5-12a5-3aac-b2ed-ec2de45e2b82.roa (raw, json)
Hash identifier: jGVK56mqBMLULK5go5nidnivDMZx0bADvNbBG/xNP6k=
Subject key identifier: C0:37:F2:1E:54:66:86:A9:AB:8D:33:E2:26:A2:A2:A1:2B:34:3E:B6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840385137BD3BDB1D1F647EA900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/840091b5-12a5-3aac-b2ed-ec2de45e2b82.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 162.219.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:51:37:bd:3b:db:1d:1f:64:7e:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=15d55096-c43f-4070-842d-c30e46fec4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:ed:aa:ca:a8:5a:b3:fe:4a:16:cb:95:80:
82:9e:34:8c:bc:84:9f:8f:f1:10:46:55:02:9d:20:
bc:1e:90:d6:4f:9b:95:b1:5a:78:97:73:46:8f:77:
ad:c0:b7:51:e7:4e:1e:66:f7:59:ec:59:83:c2:69:
2c:f1:5f:ba:ef:5e:93:e1:cf:1d:d3:35:f7:e7:45:
4a:c4:cb:92:d3:06:dd:32:05:3e:cf:23:86:b1:f2:
85:ec:63:a8:c0:89:4d:0a:d2:d7:0e:5e:a4:37:be:
43:57:24:90:51:87:bb:96:08:9c:8e:e2:d0:d7:e9:
44:0f:b0:a9:86:69:c1:dc:ba:34:e9:cd:60:2c:2f:
4b:dc:f6:6f:8b:8e:29:72:f5:b6:97:3c:e2:cd:49:
4a:41:44:40:92:77:bb:8b:c0:92:01:f4:40:89:4b:
66:57:2a:e8:70:66:b1:e7:67:c5:7b:9e:19:62:98:
f4:7e:eb:01:89:3f:22:5a:6c:15:23:25:bd:30:93:
92:da:a0:0a:9d:d1:da:04:89:b6:dc:be:f5:57:dd:
e1:11:ca:09:a5:aa:1b:28:a0:9b:7b:99:8d:97:58:
7b:f1:9f:74:d4:7f:a8:7b:5d:35:f7:74:32:4d:5f:
6a:45:63:34:37:63:fc:4b:43:31:b6:d1:c8:d7:66:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:37:F2:1E:54:66:86:A9:AB:8D:33:E2:26:A2:A2:A1:2B:34:3E:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/840091b5-12a5-3aac-b2ed-ec2de45e2b82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.219.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:d8:91:26:38:9c:fe:3a:a8:9a:cc:c6:a4:57:01:e5:45:f3:
d3:47:b2:c5:60:a3:3e:c1:b4:c3:f4:8d:cb:7a:c3:d9:15:d2:
fc:a9:bd:01:76:ca:a4:7f:34:65:0a:8d:46:7c:30:13:66:19:
43:0e:b9:fa:1a:4d:7a:dc:59:39:6f:1d:e5:ec:2d:e2:60:10:
1e:c6:44:f1:6c:53:d0:43:65:5b:62:02:c4:7d:a0:a9:3f:4c:
e6:5f:db:a7:8b:45:31:6f:09:bc:8a:65:de:b3:67:da:cb:5f:
23:ec:59:5c:7d:ea:94:ac:2d:46:ab:10:1b:ef:70:86:46:7d:
39:26:fc:f4:fc:7b:10:1d:16:22:b6:76:00:c3:9c:52:4f:91:
54:45:bd:d1:0f:03:cb:4a:eb:71:d4:bc:36:f1:d0:59:15:8e:
e6:c5:f3:a8:25:5e:80:c1:95:bc:01:71:f0:fc:fa:e2:1a:bd:
68:de:18:13:4a:4c:e4:a9:c7:76:e1:0f:e6:9c:f5:d7:ba:6a:
a5:ac:9f:0b:1b:15:08:ea:97:0d:a0:54:cc:32:df:05:22:b6:
6d:58:c6:68:24:d3:33:48:57:a2:9d:da:f0:6f:81:99:9c:27:
f1:d3:a0:ff:a1:62:31:e2:72:1a:ce:c2:bd:a2:c6:ed:31:41:
36:12:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:42 2025 by rpki-client