Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f2a91af-ff6a-3538-bf39-aea44b544080.roa
File: 8f2a91af-ff6a-3538-bf39-aea44b544080.roa (raw, json)
Hash identifier: Pi7rxengWKj5SC6amL8Eyy6S8Nl2lGnCdAEoLp6Wwfs=
Subject key identifier: A1:C7:EC:FB:D6:0D:B5:8A:B8:08:99:F2:8C:56:5C:51:E4:00:9F:EE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5AA47B58A5582184A93ADCA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f2a91af-ff6a-3538-bf39-aea44b544080.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 156.4.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:a4:7b:58:a5:58:21:84:a9:3a:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=e77d00cc-9834-450e-a3ec-ee0fe86cedd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:ec:b4:04:ae:c4:31:fe:99:68:92:28:b1:
18:3f:ce:da:6a:15:50:ee:f9:30:a8:be:b3:b3:c9:
8f:21:c8:27:5a:76:e2:7a:41:9e:10:a9:94:f6:19:
fe:61:8a:c7:2e:c0:2b:9e:e7:be:b8:4a:0f:74:01:
06:ba:3b:e0:07:68:a0:d0:ae:d6:17:86:13:f4:b4:
5a:88:bb:8b:b6:32:22:f3:12:2c:81:77:4d:d8:78:
6f:a3:27:0f:72:ef:73:5a:e7:ea:f4:42:bc:ae:15:
58:f5:14:6c:69:96:ce:31:99:ec:80:85:8e:fe:c4:
5a:f1:ca:a9:b6:7c:1e:d0:4b:a0:b3:60:63:3f:16:
29:c5:dd:9b:18:4f:76:11:95:8e:e6:12:18:26:13:
ce:bc:ca:12:4d:03:29:7d:30:7d:9f:79:4c:36:74:
88:1d:49:32:ad:07:c8:44:d0:45:53:bb:38:d9:09:
34:78:83:45:51:29:31:d4:ce:25:ad:74:a1:90:39:
90:b8:2d:84:91:6d:bb:f3:3c:f3:3d:1f:7f:70:19:
8e:d4:db:0c:5d:93:b7:43:a4:d8:55:d3:0c:39:7c:
a1:0c:17:be:2e:ea:c8:26:44:05:90:9a:18:c5:ad:
11:40:47:61:be:3c:f7:74:38:ec:99:3a:03:56:ca:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:EC:FB:D6:0D:B5:8A:B8:08:99:F2:8C:56:5C:51:E4:00:9F:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8f2a91af-ff6a-3538-bf39-aea44b544080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
156.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:5e:13:be:5b:8d:8e:49:b7:3d:ca:ec:ad:87:5d:f4:ca:89:
9e:c1:d2:60:ae:32:26:48:6e:86:2c:1f:89:c9:22:de:59:5a:
6a:5e:d7:a7:11:10:63:26:f4:79:7f:f8:5c:25:f7:dc:46:3c:
36:47:56:a1:b4:b0:4c:f4:d8:2f:e2:e7:93:9c:c8:fe:6d:21:
3d:24:04:39:0e:ab:29:0d:91:fb:3b:22:ce:61:88:d2:6e:ca:
bd:8a:92:93:02:d1:e0:1a:c1:44:9d:51:b3:06:af:8a:c0:a0:
9a:07:ae:42:05:3a:54:de:9a:9e:d6:0f:24:a2:96:73:eb:29:
d0:c4:bd:f1:4c:f1:96:30:24:74:15:39:32:2f:b2:1f:a1:10:
6e:41:7c:b5:49:bf:4a:38:cc:a1:ac:d2:03:e0:1a:b3:a0:e5:
5e:75:42:c2:a9:07:78:e6:6c:71:ca:0d:cd:7d:80:f1:46:96:
da:cc:64:c5:0d:5a:16:61:4c:fe:cd:fe:4e:94:2c:63:b7:82:
34:e6:09:94:53:46:4a:78:96:06:e6:57:e8:ec:7d:bd:0d:b9:
79:b8:d9:b7:96:2c:2d:35:8a:fc:69:6f:9e:b4:85:6e:e7:48:
2b:29:f9:c1:e2:bc:ed:0c:1e:00:ee:97:fd:b4:fc:4e:cf:c7:
54:86:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:51 2025 by rpki-client