Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88432d0b-71d9-3577-a0ee-9ab9bb35c30c.roa
File: 88432d0b-71d9-3577-a0ee-9ab9bb35c30c.roa (raw, json)
Hash identifier: KgNLN5jprC4i39iSX5H67iEY1uygJbYw+vitJitZdOA=
Subject key identifier: DC:41:DF:F3:EA:1E:1E:51:B5:E7:67:40:1D:6A:DF:2D:A7:66:33:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD0E9DC7A45641C67F3D351C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88432d0b-71d9-3577-a0ee-9ab9bb35c30c.roa
Signing time: Thu 05 May 2022 12:00:00 +0000
ROA not before: Thu 05 May 2022 12:00:00 +0000
ROA not after: Fri 10 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 158.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d0:e9:dc:7a:45:64:1c:67:f3:d3:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 5 12:00:00 2022 GMT
Not After : Jun 10 04:00:00 2022 GMT
Subject: CN=850955a5-5439-48ce-ac73-81fac7922ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:17:c7:9a:76:3b:2a:48:43:bc:0d:e5:e7:
23:3d:4c:69:c5:94:d8:e7:dd:1a:60:f4:3a:c9:07:
ed:c8:ec:cc:24:e3:41:96:f1:96:6c:58:27:23:63:
28:79:18:3b:98:a0:a8:60:5a:e9:04:30:67:42:a4:
f7:59:4b:ca:92:92:94:8d:cd:71:ed:6e:39:91:9e:
23:cd:3e:17:25:3e:87:b4:ef:ac:90:a9:4a:56:69:
2b:99:2c:35:01:ca:54:a2:1d:fa:e1:71:2d:55:8d:
a7:2a:94:5e:66:3c:64:03:9d:a4:a1:86:bf:d8:80:
d1:aa:60:9e:ce:49:60:53:4e:ba:ef:61:14:41:f3:
9d:5f:ef:f2:ba:c5:81:87:e7:9c:7d:90:da:79:b8:
ea:2b:9f:3d:55:cf:a8:1a:28:eb:99:53:52:92:95:
5f:cd:7e:df:8c:a2:56:00:d8:f2:dc:59:63:86:9e:
5e:e1:49:72:a4:ab:ee:f8:dd:5b:9b:a3:f9:11:c7:
84:ad:36:2a:0d:9f:8a:dc:2c:c8:12:c9:61:0d:49:
b3:68:bc:0d:69:cb:d2:e8:86:7d:6b:5b:cb:f8:14:
36:a7:84:fb:20:06:bb:7b:d6:db:1c:15:98:35:a4:
e9:27:f1:a3:ba:b0:4f:0c:3d:be:c9:0f:c3:c4:19:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:41:DF:F3:EA:1E:1E:51:B5:E7:67:40:1D:6A:DF:2D:A7:66:33:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88432d0b-71d9-3577-a0ee-9ab9bb35c30c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:57:3b:cd:c0:8c:e8:df:1c:b4:05:b5:23:16:ee:13:7a:5c:
29:64:a9:8c:69:6f:c1:ba:3f:c6:76:3d:77:9a:d0:02:f9:36:
32:14:be:f9:f6:28:91:b0:a8:15:b5:e5:97:3f:37:6c:da:85:
53:0e:2f:78:8f:37:ad:6e:6f:e9:e1:a2:d0:6d:43:86:ea:11:
03:26:ab:4f:00:80:97:80:b2:40:e7:dc:11:b4:3d:2a:4f:98:
76:25:15:54:b1:45:83:25:21:0e:1a:0f:05:ed:4d:04:26:ee:
32:77:7f:b0:f0:bf:26:43:b9:b4:f1:9b:17:e9:89:6f:1b:4e:
54:4a:50:37:4a:03:b4:a2:e0:93:9a:f5:11:a5:74:96:18:5f:
dc:ae:00:d8:ce:8e:40:f2:72:3c:f4:de:b0:d6:40:aa:22:7a:
8a:88:7f:89:da:32:8c:c5:7d:c9:8f:e7:d5:12:35:4f:2c:d4:
bb:c7:34:7e:91:7a:cf:1c:d1:c3:92:5d:50:71:25:09:2c:58:
34:7a:55:2b:62:63:99:3d:34:18:0d:c4:62:7d:2c:7b:35:1f:
38:b4:0c:7c:f4:17:a4:18:c2:98:7e:77:b0:10:85:eb:a1:57:
c3:48:ef:df:da:ec:5b:77:8c:94:2e:fa:56:ef:38:cc:a6:2b:
32:60:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:42:47 2025 by rpki-client