Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cbd6516-888b-38a6-8a11-92f105a0ce09.roa
File: 8cbd6516-888b-38a6-8a11-92f105a0ce09.roa (raw, json)
Hash identifier: ux6tDiBHRbvJVMxfRw+vGjUMet7hLUqQPNWRD6QPkVg=
Subject key identifier: 2E:76:33:67:49:C8:22:22:00:8D:39:41:2A:04:42:E5:CC:7D:C5:08
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB57D6D8B702A3298F356BA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cbd6516-888b-38a6-8a11-92f105a0ce09.roa
Signing time: Tue 26 Apr 2022 12:00:00 +0000
ROA not before: Tue 26 Apr 2022 12:00:00 +0000
ROA not after: Wed 01 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 170.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b5:7d:6d:8b:70:2a:32:98:f3:56:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 26 12:00:00 2022 GMT
Not After : Jun 1 04:00:00 2022 GMT
Subject: CN=f90af061-e9cf-4c6b-be80-73a41b8900b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:e7:ed:e7:4b:c0:55:69:93:83:29:d4:fc:
90:a6:c3:5a:05:f2:39:88:91:6d:87:93:9e:a0:12:
27:9c:21:9b:dc:82:b1:42:0e:b9:e5:84:6c:02:d8:
3a:36:67:4c:36:02:40:ac:3e:b7:31:11:3a:9f:37:
0b:a9:e7:49:dc:15:f2:0b:5d:7c:83:4c:89:dc:82:
b1:0c:7a:83:28:21:d1:85:f9:e1:e3:ed:54:18:d6:
8e:4c:98:c0:84:2d:94:da:6a:90:d8:a2:b1:fb:ed:
52:fa:ad:d0:45:11:d2:00:11:29:d9:95:5f:14:81:
da:3d:c6:dc:24:54:79:1d:f8:e8:bf:2b:0c:2a:5e:
58:f0:7b:77:9f:a8:b0:60:ca:18:2c:ed:7a:40:eb:
15:92:30:f9:07:1c:37:21:a6:03:00:88:b4:69:2f:
bc:ae:55:03:bc:86:8a:92:c9:e3:c0:e5:3a:cd:c5:
43:99:7d:4d:52:1a:95:6d:03:72:12:ed:5c:ef:ad:
45:ac:4d:33:01:b3:ef:6d:8b:be:c2:82:17:92:3e:
db:c4:41:50:1f:91:c8:66:2a:86:59:73:a3:32:17:
10:ed:98:f5:a7:f8:d9:06:a0:eb:5d:09:2b:a5:f1:
40:c0:18:a0:27:33:a2:c0:ae:21:5f:b5:a9:d2:8d:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:76:33:67:49:C8:22:22:00:8D:39:41:2A:04:42:E5:CC:7D:C5:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cbd6516-888b-38a6-8a11-92f105a0ce09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:30:52:a9:b9:4b:88:69:92:87:8d:c1:89:0a:68:49:f3:59:
fc:85:4c:d4:2c:73:6c:38:32:51:0a:ee:bf:1c:98:7d:b5:14:
30:56:d4:a6:22:e1:b5:3f:2f:e7:37:ff:65:a8:0d:9d:7b:8c:
0a:8b:5a:83:35:c6:97:d6:32:9a:f5:14:a5:47:0a:1a:33:da:
f2:84:b0:cc:0e:66:43:5c:80:0e:f0:67:de:1b:fb:c0:2b:04:
7b:ff:be:cb:c1:53:84:d9:c7:ae:7a:50:e2:12:6d:93:45:6c:
64:e7:08:03:70:45:e2:49:80:1e:d5:b8:ad:0c:55:46:2e:7d:
cf:4f:bf:ad:d1:f4:b1:a9:ea:84:4a:d3:d4:ce:3c:ae:c9:b8:
63:ad:29:c0:e2:57:06:ae:b4:c6:5e:ed:17:85:25:55:32:96:
4e:4e:1c:c2:8f:b0:c7:ac:a7:3c:bf:a7:7e:94:9c:be:86:79:
87:7f:77:31:63:34:d5:5f:c2:0d:ac:cd:81:70:95:f2:63:e1:
17:88:57:21:dd:10:5e:b3:e2:7c:90:0c:0a:76:0f:94:e7:cc:
4e:43:5f:1b:b6:d9:55:1f:47:88:da:fd:54:f1:0a:3f:80:ed:
20:58:37:f3:b7:4b:01:01:07:90:6d:6e:a3:23:47:98:de:13:
b5:94:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:52 2025 by rpki-client