Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87bea21a-660a-39fe-8d55-36a24cfc8f13.roa
File: 87bea21a-660a-39fe-8d55-36a24cfc8f13.roa (raw, json)
Hash identifier: +gB9bmFlbRDMK5DVwDvHjQpsyo1DAb8Z6o2oVJ2l6Qs=
Subject key identifier: 38:25:D8:3A:88:FE:DE:88:FF:9F:A6:40:8D:B8:CD:73:FC:B2:28:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584000387BF0699164A7138C8A20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87bea21a-660a-39fe-8d55-36a24cfc8f13.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:00:38:7b:f0:69:91:64:a7:13:8c:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=225d233c-8024-4931-975a-fe1d219b1a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:65:2e:dd:15:c6:ea:b9:1d:69:b7:44:e0:1b:
32:b4:77:d5:32:64:db:c8:68:33:cf:1b:df:d4:06:
8f:a3:7e:f2:0c:33:f4:e9:6e:2b:8e:7f:ba:22:ee:
44:35:0a:0d:11:f8:99:f5:4f:4e:e0:48:c8:eb:07:
5a:5e:14:84:a2:d5:a7:d8:87:d3:dd:d5:08:bf:49:
8e:51:dd:c6:37:44:ca:fc:8a:cb:0f:6e:ac:6e:7c:
41:2c:ee:03:87:e4:82:92:f1:32:16:14:84:53:a1:
ac:6b:2f:94:0f:db:32:87:47:bb:41:3f:20:2a:2d:
1c:59:cc:80:99:42:71:e1:7b:16:3c:28:3c:f8:c3:
93:9c:4e:6a:e3:a1:12:61:73:d4:d5:7b:fb:a3:d9:
e4:60:9d:cd:72:ee:26:06:ae:78:84:2f:69:50:02:
2f:b2:7b:cd:06:0a:9e:5b:ae:29:ca:54:bb:06:0a:
a2:b1:2e:1e:24:2a:5c:2c:f5:5e:d4:7e:83:24:14:
fc:fa:15:b7:83:08:a4:8a:b8:18:6b:9e:f8:89:9a:
4e:cb:fb:56:51:fc:4a:a4:17:64:8d:50:41:69:17:
90:8d:ff:32:b9:fd:51:a7:9c:61:26:aa:fc:b0:76:
60:19:8d:10:37:fa:e8:89:c3:69:dd:12:ca:37:a6:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:D8:3A:88:FE:DE:88:FF:9F:A6:40:8D:B8:CD:73:FC:B2:28:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87bea21a-660a-39fe-8d55-36a24cfc8f13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e9:a4:8d:05:70:c2:e0:90:fc:ba:e1:a1:2f:6d:d1:cb:19:
58:9f:26:40:eb:c2:99:0e:f0:ec:29:23:a6:6d:0b:94:d1:aa:
8e:09:09:77:60:c8:ff:f4:95:51:d5:07:d8:ae:9f:b2:2f:19:
e5:34:be:d7:6c:02:2a:15:1c:7c:a9:5d:16:d8:71:15:36:71:
62:e1:99:6c:ac:78:65:1c:78:93:67:a2:de:4c:25:5a:f0:14:
a5:b2:3e:a9:d9:45:5b:c8:51:26:01:86:62:ed:80:5e:aa:f3:
83:98:69:ac:a4:0f:73:62:c2:66:70:3f:71:f8:7e:12:6f:37:
ed:84:e8:f2:e4:be:bf:4d:8d:e9:14:d4:8c:02:e6:43:13:63:
5e:49:89:fc:62:97:92:ba:39:9c:34:32:32:85:7c:21:ba:dd:
2a:97:6a:72:27:df:a3:ca:f7:44:4d:58:f1:3f:23:c4:57:9e:
0c:9b:22:13:e5:af:ac:a5:b0:10:2c:a4:7c:34:a4:a0:cd:06:
8d:0e:fa:53:c5:e5:be:0e:c7:62:0b:57:f6:eb:ae:87:c9:e3:
08:2a:76:7a:fe:86:9f:aa:e6:a6:45:89:c2:48:2b:6c:64:9c:
5f:8b:54:88:3a:16:97:33:13:c5:6c:83:9e:46:1b:48:36:7f:
b6:d1:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:33 2025 by rpki-client