Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89408aad-7090-3b22-8288-0f167d6e9984.roa
File: 89408aad-7090-3b22-8288-0f167d6e9984.roa (raw, json)
Hash identifier: eYN3eBgvXhycMJYHNm7V4ritl2DAayExYzM9b9YIBxk=
Subject key identifier: CB:8D:6B:37:FA:61:86:76:C0:0B:87:28:B1:26:18:14:1C:A8:12:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840276BE126B52EBA36EB56B140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89408aad-7090-3b22-8288-0f167d6e9984.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:6b:e1:26:b5:2e:ba:36:eb:56:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=ab98c1df-3853-4bcb-8723-b7a211cd4cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5a:c0:7f:c0:63:36:b2:b0:51:3a:2e:fe:15:
67:86:30:33:87:2b:04:ee:72:17:ca:1a:4d:51:9c:
f5:47:f1:a3:46:5e:93:17:12:6b:e9:7b:dc:32:f4:
fe:44:c5:c9:5f:ce:ce:66:79:58:be:67:1c:09:57:
ca:f1:01:94:91:d8:bd:0d:14:db:09:26:86:10:0a:
8b:9b:50:6c:47:de:35:6e:73:44:df:d0:a9:38:fc:
9f:02:d9:d0:1b:db:fe:46:4c:94:ee:eb:d5:07:07:
a4:ed:5c:a4:79:47:76:34:66:25:63:56:9f:01:4a:
91:07:55:05:b5:d6:cd:23:9e:2a:af:c6:6e:ac:37:
31:8e:ad:82:ee:95:f4:14:56:8e:96:f6:5d:24:69:
2d:09:26:6f:b1:1a:a0:1b:1d:e8:0a:2a:02:71:51:
6c:b3:0d:a4:6b:83:b9:72:2c:ec:dd:59:29:3f:63:
92:6e:9e:8b:2f:ba:cd:60:23:f7:de:c5:e3:ff:45:
a6:fe:27:ab:52:e1:00:87:cd:d7:37:a3:84:07:e5:
c9:73:70:01:b9:1f:e3:94:e2:fd:e6:9f:08:c6:a1:
e0:b9:23:5f:8c:74:3d:b3:f6:ac:4c:ae:14:94:8f:
33:c7:fa:e7:7c:e2:f6:f7:d1:f3:e7:b8:e4:e8:05:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8D:6B:37:FA:61:86:76:C0:0B:87:28:B1:26:18:14:1C:A8:12:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89408aad-7090-3b22-8288-0f167d6e9984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:79:44:fe:25:02:0d:7b:62:af:4b:15:3c:02:87:35:fa:7a:
51:41:cf:0d:8e:0b:e9:89:2b:21:4b:94:7a:d4:7b:03:aa:55:
e5:13:eb:62:d5:72:87:2d:8e:41:bb:0b:44:a7:12:6a:a9:78:
ea:5d:fb:1e:68:80:a2:0c:e2:1d:c3:a4:cf:e5:68:fb:77:cf:
8b:8d:94:b5:29:32:13:10:d4:c4:19:78:8a:4d:d6:62:b5:08:
d2:c9:b8:d8:d3:77:9a:fd:d4:98:63:36:a4:ee:b0:dd:3f:82:
52:94:0f:6e:ca:e4:98:dd:95:08:b4:42:44:c0:a5:a9:7d:a5:
20:c9:29:11:83:a9:8c:0b:75:20:43:b5:ff:f3:d7:4d:2d:08:
db:bc:77:ee:89:8d:f7:9d:cf:d4:e3:27:78:4e:69:a4:9e:fa:
ea:c9:41:9e:86:78:fa:06:d7:28:b5:bd:6c:7b:ee:ee:d5:c1:
b8:d2:6d:75:6f:b7:61:69:92:79:ed:07:7e:d2:59:b0:48:49:
a5:f5:1f:1a:1b:8b:94:3c:97:b7:6c:6b:7a:10:bf:1a:18:7e:
8f:d1:5e:42:0a:82:20:0f:81:09:ba:1c:91:c4:a4:fe:6b:f0:
fa:37:b2:83:b0:72:f5:f0:ff:68:77:78:7b:12:9a:65:0b:da:
b2:cc:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:51 2025 by rpki-client