Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84431ddb-5a6c-3233-b824-d72e9f6406d3.roa
File: 84431ddb-5a6c-3233-b824-d72e9f6406d3.roa (raw, json)
Hash identifier: RRgfZddso3aTVsBPy8KHHoeDvIUXYLkXEU8zVV/9S2w=
Subject key identifier: A4:B6:0C:2A:F2:CA:11:BC:8C:B2:2F:58:8F:9E:70:6A:58:C9:7A:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEC634045FF6D4F0466F80300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84431ddb-5a6c-3233-b824-d72e9f6406d3.roa
Signing time: Tue 15 Nov 2022 15:06:07 +0000
ROA not before: Tue 15 Nov 2022 15:06:07 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 146.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:63:40:45:ff:6d:4f:04:66:f8:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 15 15:06:07 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=8c888fdf-54ed-49e0-89b1-6f330fea8a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:72:17:8e:77:ec:fe:7d:bc:c6:82:ac:55:
79:8b:27:3f:80:6e:5b:db:16:8d:7f:6c:86:00:8a:
87:3d:f1:e8:86:a6:c7:7c:62:ed:94:ab:82:2b:be:
7d:30:e0:35:d9:8c:3f:b2:5f:f3:e9:75:6e:02:58:
40:b7:16:0b:00:86:59:61:89:42:48:32:a8:cf:89:
a3:3d:7c:25:28:c4:5f:77:2a:58:ea:e6:c2:31:fb:
20:32:44:1c:09:11:69:e2:04:58:1a:48:55:a3:d8:
97:86:60:82:a0:33:b0:58:9c:51:9c:9f:b7:c6:5f:
9d:1a:c8:1d:94:05:3b:5f:d2:69:23:86:16:8d:05:
dd:0f:01:62:32:26:3c:aa:ed:36:00:1a:72:1a:3a:
d1:26:f5:26:a3:c9:6a:28:bc:5d:6f:a5:b0:6c:82:
88:8e:e2:38:7d:e3:40:63:12:88:b1:7e:6f:1c:14:
5c:61:ce:5a:1a:86:59:b9:ab:f8:ed:05:ab:b7:d2:
5e:ea:08:ee:44:ee:07:3c:fd:ae:67:eb:ba:28:ee:
77:6c:38:4c:c4:fe:de:a8:61:5c:ab:8f:0b:70:57:
da:c0:a2:f0:e3:ff:5a:5b:4e:1f:40:d7:60:47:15:
d5:54:b4:fa:ae:85:3a:cf:64:51:8b:8c:f6:cf:60:
91:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B6:0C:2A:F2:CA:11:BC:8C:B2:2F:58:8F:9E:70:6A:58:C9:7A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84431ddb-5a6c-3233-b824-d72e9f6406d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
146.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:dc:05:d9:82:42:0f:4c:80:0a:e4:2e:07:38:68:a8:79:99:
66:22:10:8f:e7:77:8c:82:24:74:fa:e8:40:fa:01:f8:7b:d0:
ef:3a:6a:88:7c:06:e1:36:95:da:99:a5:04:02:53:12:f2:82:
98:40:ad:75:2b:3f:23:37:3d:4a:50:6c:97:b2:db:0c:04:1c:
fc:a8:b5:ba:cc:47:72:2f:d7:13:09:5c:89:ca:0c:b0:de:4a:
b5:c3:f0:66:c0:84:ec:48:36:d1:74:d6:fa:cd:7c:55:21:8c:
de:05:5d:e8:b0:d4:5b:a1:ae:54:c2:7c:ea:d3:ba:07:37:88:
5e:ba:fe:52:1d:57:9a:8f:82:d0:a8:cf:9d:48:65:f1:2f:03:
09:86:0e:49:4c:33:95:41:6a:bb:8c:4a:b5:17:8d:d4:12:73:
74:0b:a0:b9:62:35:06:cb:3f:ca:9a:79:05:7f:8e:b1:c4:6c:
a7:d5:18:aa:db:65:ef:27:4a:04:56:ee:bd:62:1b:4b:54:a5:
3c:88:9c:b2:7c:38:31:39:39:65:f2:9e:db:d1:8d:3a:bc:b5:
fa:37:a9:c9:67:d2:6a:31:a2:e1:e1:26:9c:95:9c:bc:6b:8d:
8b:7d:d1:c6:b4:33:18:2a:67:04:cd:f3:e5:d2:fc:78:2c:53:
86:8c:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:56 2025 by rpki-client