Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89ebd896-b7b9-3c5f-be28-ac902a4334de.roa
File: 89ebd896-b7b9-3c5f-be28-ac902a4334de.roa (raw, json)
Hash identifier: J3x0r3N61qrVc85uZQNFIflRusJm9LYYKub27V4+GAg=
Subject key identifier: B3:F6:38:67:92:F0:62:16:93:58:ED:76:A7:A1:9C:9D:59:07:EE:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584068975CED24515D58A955BB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89ebd896-b7b9-3c5f-be28-ac902a4334de.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 130.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:97:5c:ed:24:51:5d:58:a9:55:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=6b1898d7-2cef-47a1-b263-a0ec10b305d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:b4:cd:64:0a:3f:44:56:58:25:19:30:d2:
9d:29:37:48:46:5d:96:5c:73:ab:eb:65:c8:a0:72:
8d:8e:e8:1b:28:05:77:24:ab:81:e0:45:1a:22:9f:
4f:65:db:fc:7b:59:e3:8a:3d:54:1e:e5:ab:3e:be:
70:2e:b4:cd:0f:09:55:e3:29:d5:5b:16:88:45:df:
59:d7:4b:16:56:9f:06:dd:a2:80:80:8c:06:1d:7a:
13:a1:e4:d7:f1:19:ad:34:37:7f:88:86:02:f3:84:
94:f0:58:95:01:c1:09:ba:a5:32:45:ab:3b:ac:54:
5c:5a:f4:75:7c:0c:ec:fe:5b:37:fe:f1:d4:b0:9f:
4a:68:dd:75:41:a3:4e:57:fc:6e:f7:6e:4a:4f:ed:
55:8e:0a:c2:80:06:52:4c:c9:48:99:48:53:34:b7:
7a:28:ff:a7:bd:4d:3a:9a:bc:10:12:38:63:7a:a0:
f6:96:b5:86:31:10:c1:af:f8:e5:82:24:55:59:54:
38:f0:2f:e6:fd:e6:68:9f:83:5e:d3:27:1b:45:34:
90:8d:2c:6f:45:1c:c1:9e:14:af:3f:68:fa:89:50:
b1:53:9f:93:43:f4:4f:93:23:da:cf:83:bb:eb:51:
cc:f8:61:27:8b:7f:0e:3e:fd:74:61:8e:7d:1c:3f:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:38:67:92:F0:62:16:93:58:ED:76:A7:A1:9C:9D:59:07:EE:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/89ebd896-b7b9-3c5f-be28-ac902a4334de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:00:8c:ea:af:1b:df:2b:3a:68:6d:f5:03:10:97:20:88:40:
c8:75:8f:42:76:56:43:27:d4:11:86:e5:40:81:8a:47:c4:39:
a4:4a:50:8f:22:ca:77:b7:b1:22:10:78:33:e5:be:1e:6e:ff:
e0:17:53:6b:47:49:5e:77:31:61:e5:6c:cb:15:be:d5:a2:9c:
1d:49:43:df:c1:88:d0:03:11:fc:73:24:94:8a:aa:db:1d:a1:
8d:b1:84:4a:99:b9:17:e2:48:03:d0:fa:dc:45:5a:5b:6c:fb:
f5:96:e4:9f:4a:38:04:3e:fb:58:df:20:ce:33:98:2b:6d:87:
72:74:69:ec:a6:e7:d8:76:b8:4a:8e:66:7f:72:85:89:43:1e:
1d:80:10:e4:83:81:f0:8f:a6:0f:c9:75:e2:8b:3d:39:46:50:
e3:f4:a7:1b:5b:d8:10:f7:40:ac:25:cb:0a:04:8b:62:56:b3:
2b:dd:05:10:07:12:dc:04:2e:fd:97:6e:0a:6c:92:bf:7c:3f:
bb:f0:77:f8:b5:5f:d7:5c:a8:fa:a9:99:1b:00:53:d0:59:77:
70:d8:ce:6f:43:46:75:b3:41:86:81:9e:af:a9:03:43:31:a8:
b3:49:a8:6d:fd:ad:c6:71:f7:c8:e4:61:0d:0c:33:96:71:ec:
cc:ab:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:04 2025 by rpki-client