Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/947ada9b-cea5-3dd9-b41b-c17a1012b593.roa
File: 947ada9b-cea5-3dd9-b41b-c17a1012b593.roa (raw, json)
Hash identifier: O4BzaYKTcy+A8JCDloDMr+lC6Uc/C2KsNfsbm4RD/wo=
Subject key identifier: 45:7E:E4:C7:5F:7D:10:45:9D:38:B6:FA:A0:C2:41:AF:A9:EC:20:34
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402A6321AD3F0DC2F5AC04CF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/947ada9b-cea5-3dd9-b41b-c17a1012b593.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:63:21:ad:3f:0d:c2:f5:ac:04:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=a401be32-6215-40b9-9b57-4e9edff1f7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:da:02:2f:2a:f3:b0:b4:7d:01:7f:59:53:
d0:12:c1:8a:8d:0c:97:54:e8:34:1f:5b:67:29:25:
56:81:e0:85:18:8a:72:1c:c7:2b:7d:81:ac:cb:db:
6b:56:f9:56:52:79:de:a6:9b:45:94:4d:6b:e8:8c:
6d:b4:db:db:dd:fa:1f:9c:0b:93:c8:31:ef:83:0d:
42:4c:34:3e:36:a6:eb:90:17:f3:1d:35:b1:a3:0b:
65:66:d1:36:2f:4d:3c:77:43:b2:b7:7f:f2:1d:7b:
1b:9f:39:67:0e:15:ef:fd:81:82:eb:27:7d:c4:77:
c4:07:4e:1d:1a:f7:ff:19:97:96:95:fd:01:19:56:
bc:95:5c:f8:35:57:8e:04:6b:67:bd:43:a2:9e:4d:
3b:ba:5b:c2:9b:ba:ed:3f:c4:8c:d6:00:ca:29:df:
b1:23:11:41:90:e9:5a:ed:8a:f1:8d:74:b5:d3:1b:
fa:aa:01:b9:fc:9a:01:2a:28:cf:12:7c:cb:c8:0c:
41:9b:31:0a:3d:47:5b:b8:06:bf:ed:1b:7b:96:cc:
75:8b:53:fc:87:f3:89:4c:69:a9:f5:1d:44:4f:95:
1e:c3:7c:4b:51:ec:59:98:c1:5d:c2:fe:17:74:48:
85:55:d3:8e:6b:de:2c:02:d7:36:81:96:f5:53:6b:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7E:E4:C7:5F:7D:10:45:9D:38:B6:FA:A0:C2:41:AF:A9:EC:20:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/947ada9b-cea5-3dd9-b41b-c17a1012b593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:50:30:03:0a:56:e1:9d:d3:82:9e:11:6d:37:df:27:07:2c:
37:d1:be:8a:16:b0:7d:e1:e9:c0:64:2c:fe:57:e5:f4:7c:c9:
4d:bb:f4:13:d2:74:87:43:48:4f:5d:30:f9:fb:3d:19:b7:53:
60:0d:8a:2e:f3:05:b7:eb:e2:37:ef:df:fd:0a:f9:c6:e0:b0:
74:84:3d:c2:f9:bd:74:91:62:80:b7:7e:eb:17:a1:a3:f5:66:
a1:63:23:7e:31:5c:89:67:ce:c8:b1:19:54:dc:f2:9c:90:ef:
54:49:65:c8:6c:6b:3d:43:dd:2d:28:fa:99:7b:fc:1c:13:47:
18:f8:87:6c:52:51:d7:1d:19:a6:f9:da:54:8a:17:01:53:bf:
ad:a7:b1:c3:8d:81:38:b4:9d:8c:b8:12:ff:68:60:f7:0a:03:
3c:8b:8f:14:72:ea:68:f8:6d:e6:3e:69:39:f2:c2:c3:ef:08:
c3:fa:25:cb:72:22:ac:16:29:9a:3a:6c:d3:a1:b4:73:29:30:
45:84:7b:5c:17:2d:6f:86:da:13:1d:6a:f7:42:1c:c0:4e:de:
b2:f5:ef:63:bb:6d:24:b3:71:d9:a5:95:88:47:49:68:d0:43:
c3:8a:8f:79:0f:4f:53:e0:45:0b:2f:5c:bb:c4:7c:ad:00:6a:
8c:89:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:19 2025 by rpki-client