Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8770f024-aa4c-3045-8012-c727ec5911a9.roa
File: 8770f024-aa4c-3045-8012-c727ec5911a9.roa (raw, json)
Hash identifier: T4zV2iIEsxYeCh5LmrK5QsUAxMthUCuKh1ZhzqRqNFA=
Subject key identifier: 70:1D:3F:67:7A:5D:06:C5:97:1A:11:65:BF:46:57:F3:FF:A4:02:07
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCB0F8B2DE78209E70E2E7100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8770f024-aa4c-3045-8012-c727ec5911a9.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 167.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:0f:8b:2d:e7:82:09:e7:0e:2e:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=5637ec7f-9e90-46b9-815e-2dec73e1e37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:78:f8:80:d8:fd:b1:cd:46:dd:fc:29:38:
db:83:a0:f9:9a:6f:ac:8d:eb:ab:d3:9d:49:d4:ae:
2d:75:68:2e:ac:f3:b2:93:5d:ac:18:bd:63:c7:c6:
ca:03:71:18:70:e5:24:e4:7e:00:71:19:59:bd:a8:
4f:c2:77:aa:ee:33:ed:d0:a6:02:d2:38:d3:84:53:
e1:6f:51:19:a2:ea:e1:a3:b7:1f:e3:b6:6c:94:14:
b3:9c:6c:6d:8f:ff:aa:ac:00:f9:92:d8:24:25:6a:
f9:b0:ce:f4:5c:fa:2d:b1:47:7a:09:78:13:9b:d2:
64:1a:a5:50:6b:37:9d:9f:a8:04:2b:a5:30:6b:fb:
33:5f:db:a6:e3:9f:88:67:00:4b:37:64:d7:68:e2:
92:9c:90:a0:fc:a9:97:22:a6:d6:e6:9d:6e:38:cb:
64:9c:4b:33:3d:f0:6d:bf:9d:3d:8d:09:97:0f:82:
77:e1:db:01:28:47:2d:71:08:9c:18:6e:a2:c0:8f:
fe:b4:d6:a1:fa:79:e5:36:79:68:e8:22:06:0f:28:
dc:ff:66:2a:bd:2a:59:97:34:58:80:2a:0d:10:11:
d0:13:c2:d7:8e:d8:5f:e3:46:81:9b:a6:68:9f:d6:
ba:4c:12:93:8f:0c:cd:77:e2:a3:5b:64:df:2b:ae:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:3F:67:7A:5D:06:C5:97:1A:11:65:BF:46:57:F3:FF:A4:02:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8770f024-aa4c-3045-8012-c727ec5911a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:2c:13:a2:f7:5d:cb:7b:b8:01:7c:9f:af:14:cb:7a:2a:e8:
c0:84:df:c8:7d:08:2d:7f:e7:7d:a9:9f:b7:11:d0:d1:fa:77:
19:f8:43:ba:61:8b:d9:16:3b:00:5a:9c:99:0b:25:b9:db:a1:
d0:03:3e:c1:ee:ab:d5:fd:01:32:9c:ac:fd:1b:0f:8a:58:36:
00:5d:58:2f:49:60:a9:94:4c:85:d7:0c:bf:db:6d:14:9c:6f:
1e:17:31:42:66:a8:f9:c2:36:10:90:56:e7:6e:9a:d9:a7:5c:
df:89:e4:cc:d6:f3:d1:97:c6:7f:aa:26:51:37:4e:a3:7d:73:
c4:fa:73:66:6b:f8:c3:9b:1e:f3:db:36:75:13:8a:bb:85:3a:
b8:62:04:35:30:14:99:24:ae:e3:1c:d8:9f:a4:61:ff:8f:4f:
f9:80:d5:80:48:b9:bc:05:d0:80:f7:11:ec:29:a3:83:9f:18:
3c:3c:cf:f2:41:a4:3f:1c:80:a9:4e:33:f0:59:6d:a1:42:e6:
bb:40:cc:7c:4f:df:c5:12:ec:4f:5c:12:6d:f5:22:43:93:f4:
82:bc:21:43:0c:09:ff:bf:18:bb:ce:bc:a8:6e:8c:85:8e:9f:
b2:d4:40:f2:2f:2c:b1:05:07:5c:c8:18:6e:f9:85:83:c3:07:
8e:ca:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:50 2025 by rpki-client