Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9405cd96-5372-30f6-8099-aeb377004555.roa
File: 9405cd96-5372-30f6-8099-aeb377004555.roa (raw, json)
Hash identifier: 8hmWhNUZs48HsD6DJ6NBJTUx9PzchavXNaih6nZUQY8=
Subject key identifier: 61:09:BE:86:45:E1:C4:4A:FF:E4:07:7B:D5:7E:FD:D3:7F:0C:D5:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584011252699F4FBD590B62A5B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9405cd96-5372-30f6-8099-aeb377004555.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 151.148.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:11:25:26:99:f4:fb:d5:90:b6:2a:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=cdf62472-39e1-46f2-8af2-adcf16311055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:75:13:66:06:83:8e:a0:d8:68:e1:1a:db:
6d:a7:a2:72:0c:96:d8:5e:9d:fd:cc:a5:80:9f:40:
4b:bb:14:e3:ef:5a:f1:e8:a2:6d:e9:69:11:8c:22:
92:c3:20:45:75:36:4f:ce:e8:71:b0:2b:af:76:47:
0d:8f:cc:8d:57:13:16:78:fb:d9:d5:c8:63:97:0e:
6c:d8:0b:9e:c3:98:18:c6:58:77:a2:ff:8d:2f:2b:
95:03:f0:a5:58:3f:96:90:89:8f:f9:ba:e7:4a:87:
14:36:bb:e9:63:cb:5c:d7:7d:db:9f:f3:c9:77:5f:
d8:92:4f:23:fb:29:6c:28:e6:01:5f:55:21:d7:1d:
34:57:6e:80:99:39:df:0e:ec:b8:43:b0:13:73:42:
c3:3d:db:0e:3e:65:20:bd:88:d1:46:d3:d8:85:12:
e9:c7:8b:67:57:eb:52:9f:1e:e1:c0:b0:58:fd:92:
fe:30:3d:fe:91:32:ed:22:4d:db:14:9b:3f:c4:62:
0b:96:8a:11:1a:a4:be:26:99:84:0a:aa:74:07:48:
38:2e:1b:2f:62:dd:07:b8:b9:9f:56:a8:d0:5d:b2:
32:ed:d7:65:69:51:c7:ea:82:af:5c:0c:f7:ed:02:
f3:c2:2b:fa:45:f6:94:63:18:98:e8:6f:56:eb:f8:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:09:BE:86:45:E1:C4:4A:FF:E4:07:7B:D5:7E:FD:D3:7F:0C:D5:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9405cd96-5372-30f6-8099-aeb377004555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:1c:c3:cc:7f:5b:5b:10:0e:d7:95:a9:d3:b9:5a:58:b3:e0:
9f:41:93:bc:c3:d3:57:a8:d3:e9:d4:71:fb:a7:36:4d:5b:49:
df:79:75:28:e2:b6:bc:b7:cd:b0:40:ff:95:33:51:be:a8:d0:
39:f8:73:ca:3d:e2:94:5c:b9:da:e0:5a:35:d1:38:d0:2a:1b:
8e:44:f6:96:65:1f:28:31:33:a8:6a:7a:38:58:1d:69:16:d7:
b8:b0:7d:e6:e3:d2:9c:00:16:b5:29:48:6a:f5:45:9a:7e:f2:
c5:c4:92:f9:5f:63:1b:63:6e:fd:3e:4a:5d:4f:f9:30:a0:d3:
bc:97:13:14:f4:8e:6a:ac:25:19:03:3f:9f:5d:ea:4b:4d:d2:
f4:11:ba:b8:62:28:cc:0e:c0:d2:4d:9d:9f:89:12:8b:26:53:
df:79:4e:78:72:7e:34:be:7e:8c:54:23:2c:fe:36:2b:9b:ee:
fb:e3:89:68:3c:f8:4f:7f:c8:bb:99:fb:21:83:44:19:d1:62:
24:08:26:ea:4c:e3:e5:46:74:f5:e6:b4:95:08:7d:da:cb:b3:
6e:9b:18:8c:94:f0:7d:3f:96:a5:0d:4e:aa:8f:96:ad:b4:f5:
77:30:b1:38:39:1a:0e:37:80:24:8d:6f:5b:0a:1c:93:ce:98:
3c:e9:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:01 2025 by rpki-client