Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e37c5a-85ac-3cc3-bc50-129ac1556f17.roa
File: 85e37c5a-85ac-3cc3-bc50-129ac1556f17.roa (raw, json)
Hash identifier: BnBOCF7mynxXnkz2TFrHZ5YoC7erQsbgCTKPjJy+GqM=
Subject key identifier: 52:E5:C9:A2:2B:42:98:8D:45:BA:B8:78:FF:9E:B0:19:40:0F:5C:5F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAA1CD043D47F58A53C1D0FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e37c5a-85ac-3cc3-bc50-129ac1556f17.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:1c:d0:43:d4:7f:58:a5:3c:1d:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=7a34ec18-6595-429a-aa63-d4c80108876f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:72:c4:d5:92:f8:c2:4c:58:23:e8:91:78:
5e:d0:1f:67:be:24:62:ad:6f:60:01:49:c8:0a:b6:
63:d4:1a:b2:f7:2d:45:55:f7:94:9d:2f:8a:9d:23:
c8:64:7c:1a:62:c7:47:37:30:ff:b0:cf:d5:c3:47:
1c:fe:c9:12:a9:b0:76:29:92:92:27:ce:2d:bb:04:
71:ae:f5:53:47:4c:ab:bb:89:ef:7d:0d:84:87:05:
9e:52:c7:1b:61:fa:0e:ae:c6:f1:cb:22:3f:5c:fc:
51:6d:90:d6:6f:70:26:99:ca:ab:53:bc:cd:d2:b6:
ca:bd:f2:6c:ff:31:36:7c:cc:fb:b3:ef:a2:3d:6a:
74:02:25:63:04:e2:f2:7e:d9:8d:ff:57:98:78:29:
5e:39:73:0d:15:e2:eb:52:2b:ee:81:59:a7:c9:70:
a5:96:c0:82:82:54:0d:f6:20:d4:f9:a1:14:11:a6:
21:97:cc:9b:45:2b:1d:4e:b9:a1:29:ee:3a:17:fe:
5d:bc:04:fe:e7:de:26:c1:64:60:c2:c3:53:62:eb:
9f:68:6e:c1:9c:4a:7c:60:47:36:57:d8:be:dd:10:
bc:b7:81:65:43:fb:fc:00:fd:3b:96:51:72:e7:d1:
fe:ce:6b:90:29:e8:29:bb:92:f8:6d:3b:42:84:d5:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:C9:A2:2B:42:98:8D:45:BA:B8:78:FF:9E:B0:19:40:0F:5C:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85e37c5a-85ac-3cc3-bc50-129ac1556f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:bf:3a:b0:a1:57:09:f0:46:5e:19:44:9e:e5:d8:43:4e:69:
af:14:ca:07:f4:28:4b:d7:c8:0c:37:78:25:3d:57:48:9d:a7:
66:d8:4d:28:38:f9:1e:34:55:06:be:a6:bf:15:65:5e:e2:56:
9b:5f:be:0f:96:bb:dc:96:f7:ab:a2:6b:48:cf:c9:b9:fd:44:
70:ec:d9:53:38:e4:d2:cf:1d:a7:4a:6f:0e:0f:9d:e8:c9:e7:
fd:e5:58:a0:a1:a3:2b:a9:35:09:96:4f:da:b0:42:07:dc:ee:
06:34:a2:97:a4:d8:bd:58:7c:0f:3b:de:1d:df:ae:9e:35:a8:
43:df:cf:67:95:17:d0:46:fa:a5:6b:24:bc:c8:25:e6:df:e6:
58:0e:b3:5d:ac:23:13:67:a2:51:4c:e8:e1:c4:5f:ef:9f:7c:
95:f9:0d:1f:e5:5b:a4:da:f2:7c:e6:e1:63:f5:e1:68:a0:c9:
46:ff:b5:62:8b:b4:8d:21:a1:e5:70:be:19:b5:4e:37:f3:f6:
f1:a4:ea:ad:fe:70:18:86:97:0b:f9:ee:4e:9e:f0:75:bd:4b:
7c:59:8c:45:3d:6a:37:ab:4a:05:33:96:4b:3f:c2:75:11:51:
32:76:37:6b:b7:af:21:8a:d6:49:28:73:43:6d:44:1a:ad:e7:
1e:9e:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:03 2025 by rpki-client