Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b21c145-fe77-3be8-bf38-9b519a765a7c.roa
File: 8b21c145-fe77-3be8-bf38-9b519a765a7c.roa (raw, json)
Hash identifier: IRjcslH/mWpej0rBckNfqlANKGXaUzFnSz7+B4GHB6c=
Subject key identifier: 45:4B:BA:E7:A1:88:0B:0A:9C:AA:4A:78:B5:50:DC:17:D0:6F:5B:EA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D1D3259643653486697FB3500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b21c145-fe77-3be8-bf38-9b519a765a7c.roa
Signing time: Thu 03 Mar 2022 05:00:00 +0000
ROA not before: Thu 03 Mar 2022 05:00:00 +0000
ROA not after: Thu 07 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1d:32:59:64:36:53:48:66:97:fb:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 3 05:00:00 2022 GMT
Not After : Apr 7 04:00:00 2022 GMT
Subject: CN=6dd707f6-6a8d-43d4-96af-2ecd33d22859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:f9:6d:88:81:e5:98:98:eb:aa:ca:17:b0:
3c:26:cc:b7:52:be:d6:f1:41:1d:4e:8e:07:79:7c:
bd:32:38:39:d8:06:9d:b5:8f:e0:b4:f3:da:76:94:
78:d1:5d:12:a2:55:04:67:18:18:10:1c:ed:13:e7:
b3:c7:ef:bc:ec:39:5a:f5:18:6c:61:83:3d:fe:e5:
10:95:62:06:ba:0a:29:94:9b:22:09:35:2f:aa:78:
38:58:71:5e:4c:2f:80:19:8f:ab:e5:8d:74:1e:53:
50:75:ae:07:8f:48:2e:d8:15:2d:fb:a4:a7:af:25:
08:25:0b:c1:b6:44:1e:c4:c7:09:76:8a:27:63:79:
9f:37:8b:40:95:5d:b2:45:e6:f7:f5:64:c4:3f:83:
3e:f5:c7:eb:d1:c4:d8:b9:90:ee:55:2a:46:f4:04:
7e:02:54:ae:c2:df:11:65:00:38:c3:02:da:ee:4c:
fe:60:a5:4f:ee:ea:51:91:ff:8c:eb:21:40:7d:75:
7b:c5:95:d2:bc:fe:08:50:38:73:f8:a6:48:18:09:
23:81:69:aa:8b:7c:57:1a:ef:d9:67:1a:ad:8c:b7:
20:ae:73:ba:9b:f8:b7:62:f2:38:17:2f:bd:db:cd:
6f:32:5d:72:63:99:a5:45:91:f4:86:71:a4:2a:b2:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:BA:E7:A1:88:0B:0A:9C:AA:4A:78:B5:50:DC:17:D0:6F:5B:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b21c145-fe77-3be8-bf38-9b519a765a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:73:dd:84:1c:e3:ba:34:d5:9d:ed:02:75:df:9b:cc:5f:34:
06:0b:c1:59:25:fd:42:2f:55:27:49:af:21:70:41:c6:16:5f:
4a:93:3c:48:2c:c9:4a:63:da:3f:87:73:72:72:e9:d5:59:5f:
4b:55:1d:cb:40:14:c0:5e:db:bb:a5:25:d6:1e:08:c0:6f:ae:
6d:27:68:de:42:d7:ba:a5:f7:c4:85:dd:5e:8d:1f:54:57:e4:
9c:be:29:ce:45:27:6a:bc:a7:ea:7d:5d:82:c1:0c:67:61:f8:
58:7d:ea:53:88:65:7b:f7:ed:c0:c3:30:61:a4:c5:5e:14:35:
98:e9:37:99:56:08:16:0e:d7:41:71:1d:59:37:4a:0b:81:f4:
7b:04:c6:b2:ac:12:61:2e:47:7e:ed:eb:77:98:a2:c9:56:01:
75:0e:7e:c1:7b:ef:27:0e:a4:84:62:70:81:fd:62:07:96:e7:
42:15:ed:96:c2:50:38:4f:7f:79:16:6f:74:21:09:73:ed:ab:
17:b2:c5:65:27:20:f0:50:47:29:53:fd:19:48:06:a6:47:bd:
27:51:55:af:96:ef:08:14:62:54:f8:7d:8a:49:23:1b:10:57:
e6:dd:83:c9:7a:35:08:bd:f3:32:93:5b:5d:57:60:3c:9b:7f:
37:2e:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:37 2025 by rpki-client