Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/929e6a18-408e-36fb-81fe-07f965f87023.roa
File: 929e6a18-408e-36fb-81fe-07f965f87023.roa (raw, json)
Hash identifier: Qlb1aUDVVOPO+toxCp2eJP+5z7qZf4dFLEgT0z02qvU=
Subject key identifier: 50:7E:90:E1:3D:97:D0:7C:C3:0C:C3:97:F0:BE:5B:51:99:8D:65:F9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81A3FD8F262B5FF39D244000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/929e6a18-408e-36fb-81fe-07f965f87023.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 167.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:a3:fd:8f:26:2b:5f:f3:9d:24:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=cf08b5dc-2484-4940-91a7-f07522985c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:ef:3a:c3:65:fc:98:91:2b:d5:4a:fb:c1:
30:61:1e:95:e2:24:e1:74:67:8a:ee:76:ad:07:88:
2d:99:3a:33:8a:e0:f9:79:92:da:9b:73:61:aa:c0:
23:da:ed:b0:41:a8:b2:22:71:98:c0:8d:bb:ee:be:
56:0b:a1:31:12:e7:78:02:6a:24:5a:4b:bd:1b:c7:
68:9d:0b:27:be:48:26:75:1d:1d:01:c0:f4:e9:1a:
32:df:f0:65:5a:79:94:50:ef:34:f0:c3:88:f5:5b:
e0:bc:d1:3d:c2:a5:6d:2e:d4:28:64:cd:20:9b:73:
a9:8b:81:0b:75:02:a2:35:5c:68:95:dc:7e:e9:7d:
cf:b7:45:7d:b1:58:06:46:8e:22:4d:ec:73:26:af:
63:20:56:bf:2a:5f:85:04:c5:c0:50:76:88:74:a9:
05:67:0c:11:05:74:b1:f5:f7:53:fb:0a:2f:4a:a2:
8c:6a:7c:92:97:bd:63:9b:15:79:6e:ee:08:25:c8:
65:54:44:0a:24:ca:7a:9a:f5:72:30:0c:7c:83:f5:
ee:ea:bf:7c:1c:74:15:7f:b8:03:c3:a4:ba:d3:88:
40:61:dc:dc:5c:97:bf:bb:a9:53:8b:c5:54:1e:28:
cb:11:72:e0:bd:c2:bb:ff:db:45:6e:ab:5a:16:f0:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7E:90:E1:3D:97:D0:7C:C3:0C:C3:97:F0:BE:5B:51:99:8D:65:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/929e6a18-408e-36fb-81fe-07f965f87023.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:4a:9f:eb:71:4e:06:60:2e:20:2b:84:01:0a:5a:67:9c:ca:
0e:bc:92:05:f9:6d:88:92:93:35:cb:8a:b8:e7:d1:c5:8c:e6:
56:fe:eb:11:23:6f:52:42:78:ae:5f:b1:28:47:1e:18:a0:37:
34:49:3b:59:37:0d:db:e0:b5:ea:3e:d7:f7:22:de:eb:0e:04:
83:0f:f6:81:ea:d8:3f:6e:f7:46:a5:fc:bf:d8:07:02:5a:8d:
15:84:c9:16:45:70:8e:d6:c6:9e:22:a9:43:10:48:98:b6:c2:
9c:e5:ed:70:f6:c5:72:c1:48:e5:4d:c8:81:f0:92:cc:c8:d8:
27:bb:43:ca:d3:fd:4a:ef:c4:72:91:88:52:ee:cd:ac:ee:5d:
b4:e6:32:33:c5:cb:58:85:9f:cc:86:3e:f3:d0:86:18:f9:4d:
ad:e8:47:0e:79:2e:66:59:5f:42:aa:8d:4a:28:db:f8:0c:bf:
ba:54:18:74:88:03:6a:a7:cb:c0:dd:f9:f3:d4:ae:88:fc:16:
0c:13:3b:f1:f9:0c:44:43:b6:72:2e:d0:e8:1c:36:26:44:8f:
4b:75:fa:66:d9:97:23:34:89:74:6e:ee:ca:7f:1c:3c:c0:fa:
12:bb:eb:d6:f0:cb:d7:dc:b2:78:f9:39:d7:9b:2f:af:29:59:
17:1e:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:43 2025 by rpki-client