Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b9e03f4-8975-3d07-81eb-7141f3961572.roa
File: 9b9e03f4-8975-3d07-81eb-7141f3961572.roa (raw, json)
Hash identifier: XnBqyRtHAa7ODHz+nikU8/bVOU/0Seb2g/HoW1GcPoE=
Subject key identifier: F2:51:84:5C:E9:B6:B3:DF:B5:C3:9F:17:DB:0F:9E:7E:3B:45:18:4F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2FF97D1155DBCF7818948780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b9e03f4-8975-3d07-81eb-7141f3961572.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 157.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2f:f9:7d:11:55:db:cf:78:18:94:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=21cf7a3b-ea98-445f-93f1-35d7890dde89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:6b:0b:30:a5:ce:ed:1a:c0:53:66:fa:fd:
3a:6e:70:8f:6a:2d:a8:8d:b4:55:94:8b:d2:c2:a7:
ed:27:ca:3c:99:33:50:3f:3c:61:bd:72:2f:26:a2:
35:0f:b8:57:a5:d7:1c:6d:52:7d:27:07:1c:68:8f:
63:a1:43:40:78:89:63:7c:4f:cf:c3:fe:be:90:39:
29:9c:b7:ee:2b:80:68:3a:65:0d:8f:3d:ca:42:0a:
80:96:af:13:26:2e:d4:51:d8:c7:5c:cf:12:b2:c7:
ca:75:57:d3:47:5c:48:50:13:a1:2d:10:0f:f2:56:
96:ef:36:bc:3f:ed:5f:3e:fd:d8:83:64:e5:8e:37:
c7:60:cb:80:4f:ff:02:aa:37:e6:07:06:36:1e:2f:
10:e3:79:e5:9e:da:13:8c:a2:4e:6d:a4:58:6d:2c:
98:59:b0:ec:2c:7d:65:b2:b6:3f:5b:bc:48:0d:7a:
3d:62:84:fb:b3:26:78:05:7b:21:c2:47:85:32:7f:
e4:64:45:ab:be:d7:86:a8:6c:78:4f:99:d7:21:98:
1b:8b:e2:d7:02:54:df:a2:1e:55:8b:a9:94:d0:0e:
f7:80:d4:9b:a1:b8:2b:3d:63:17:01:b6:13:65:08:
03:b4:92:ce:b7:31:6d:01:30:b8:c3:b7:e0:12:43:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:51:84:5C:E9:B6:B3:DF:B5:C3:9F:17:DB:0F:9E:7E:3B:45:18:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9b9e03f4-8975-3d07-81eb-7141f3961572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:a1:dc:be:b1:a7:3e:dd:c8:22:f0:a5:e1:81:5a:6d:d0:7a:
f3:fb:d8:f0:5d:b5:c5:7b:9b:f5:ee:ec:25:54:9c:2e:9c:6f:
b7:94:cc:5b:76:a5:13:76:4d:7e:82:f8:68:c1:85:b1:6a:89:
a5:09:d2:45:9b:b1:f1:1e:5d:ee:0b:70:28:21:d4:33:76:57:
3a:02:4d:08:41:5d:91:56:34:6d:e6:cb:91:32:91:30:8a:c1:
fb:13:96:eb:e5:f8:c6:35:b8:14:a3:74:cd:43:1f:e0:ac:33:
1c:13:83:6e:31:1c:15:0d:36:5e:58:bb:97:c5:8f:01:c2:49:
dc:dd:a7:bf:41:2f:c1:74:21:22:ae:5d:f7:bb:9d:f9:46:16:
6f:29:c3:71:ef:4a:59:e8:9d:96:07:d9:b2:3c:2c:2d:87:8c:
db:58:d5:5d:04:7d:36:0e:35:30:4d:8a:ed:27:4a:8f:1c:74:
83:d2:9a:45:a7:1e:f0:59:c6:68:12:7c:12:56:30:11:24:12:
36:61:ea:4d:c7:3b:75:af:b6:48:e5:4c:60:92:fe:35:a2:88:
89:7d:f0:21:51:85:11:c4:15:af:af:36:47:ea:3f:bb:75:89:
90:a2:ec:9a:55:c1:bc:17:13:2a:e2:1c:00:ef:b6:13:f0:c5:
03:30:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:53 2025 by rpki-client