Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88c8ad9a-198f-3e5d-b87b-17a1afd53961.roa
File: 88c8ad9a-198f-3e5d-b87b-17a1afd53961.roa (raw, json)
Hash identifier: 7fmZD51TWVBYeGPBvotOwV+cA4sQm/Z6M5AXAlejsJo=
Subject key identifier: C7:56:B0:42:1A:58:E5:8D:AE:12:D2:C7:52:20:3C:A1:FD:CC:BB:5F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D77A2B64502C4443089709A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88c8ad9a-198f-3e5d-b87b-17a1afd53961.roa
Signing time: Mon 04 Apr 2022 04:00:00 +0000
ROA not before: Mon 04 Apr 2022 04:00:00 +0000
ROA not after: Mon 09 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 143.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:77:a2:b6:45:02:c4:44:30:89:70:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 4 04:00:00 2022 GMT
Not After : May 9 04:00:00 2022 GMT
Subject: CN=d4165420-af2f-4c17-b1ea-5a3adb677a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:cc:b3:07:04:af:93:27:76:5b:3c:09:fe:
16:c0:46:35:65:68:a5:21:ae:4c:a9:08:ef:94:a5:
4c:84:60:65:a4:af:02:ca:7d:c6:78:52:54:76:8b:
39:a0:7d:83:81:da:f0:ee:63:f2:45:ef:d0:3d:fa:
a0:ae:96:7b:da:ef:6a:5d:ac:65:2c:ad:b1:c5:e8:
29:cb:04:eb:dd:d6:ed:1d:d0:ac:1c:22:ac:cc:be:
0f:8d:c3:9f:22:77:6f:fe:11:d0:24:bf:19:a5:3c:
67:43:ef:29:bb:de:22:39:a1:3a:34:fc:06:8d:f1:
ab:91:00:22:fd:24:e5:50:07:b1:ff:1f:d9:07:eb:
aa:4b:22:a2:bb:c5:bb:2c:98:27:f4:30:31:49:b9:
7f:70:c4:b0:54:85:80:14:13:fc:d0:65:52:87:51:
21:7f:20:da:ef:ca:0d:7c:ea:7c:c8:b9:34:86:dd:
76:a7:38:66:71:7a:6d:90:62:88:d7:16:33:82:75:
16:d0:48:1f:90:b4:95:86:ac:05:c9:aa:40:c5:4a:
0d:e0:1e:67:3b:1d:e9:50:38:30:a1:f5:de:28:c9:
0c:f4:99:54:8f:92:7e:dc:88:ed:cb:c8:05:ba:3f:
c0:4b:ba:70:f5:9e:5d:e9:df:2d:b8:1f:d1:8b:80:
c8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:B0:42:1A:58:E5:8D:AE:12:D2:C7:52:20:3C:A1:FD:CC:BB:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88c8ad9a-198f-3e5d-b87b-17a1afd53961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:d4:bc:20:3a:c4:77:50:2a:cd:f5:ce:e5:b0:55:e1:25:e3:
ae:88:b3:94:47:24:8f:ad:3e:30:50:84:e3:39:94:48:83:e3:
83:6a:88:27:bd:c6:c1:7d:ac:76:e5:81:d2:b6:6f:db:0d:23:
3d:4f:d1:ff:f3:94:09:d7:ef:01:7e:1c:d8:61:67:af:ac:f2:
40:2d:7c:2c:be:7e:4e:c8:41:00:c3:20:59:7f:67:1a:49:b5:
32:b2:ac:1b:34:8c:3d:06:d9:89:a3:71:2f:bf:6a:9e:ad:44:
bd:7f:f3:4c:64:8d:37:0e:df:17:3a:18:1a:da:31:f4:1f:16:
f0:a9:9e:5f:7e:ae:44:72:77:fc:b7:38:d7:95:95:8b:91:bf:
bb:a1:b8:76:2a:1f:53:1e:d1:57:10:4e:e4:98:f9:b0:2b:15:
07:82:03:95:fa:ac:f7:93:d5:24:ab:01:7a:20:fe:99:51:1e:
26:cd:b0:44:90:d7:ee:3f:83:61:62:43:68:49:a8:72:4d:10:
83:ba:4c:2f:44:d8:c1:c0:37:d9:99:27:e7:b0:88:41:0d:37:
e2:18:89:1b:4d:93:c3:da:c4:8f:e4:75:da:e8:4e:9f:26:2a:
fa:98:aa:ef:69:18:50:a7:f6:23:dd:a7:f9:c6:77:75:a3:c3:
16:cd:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:54 2025 by rpki-client