Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d25a038-5d0c-32dd-b9de-e520f6127158.roa
File: 9d25a038-5d0c-32dd-b9de-e520f6127158.roa (raw, json)
Hash identifier: QleJ0bVuCzQav1dhKxA35GnJnTqLOy0pi4Yge8MOIKA=
Subject key identifier: 65:14:CF:6B:DB:7C:C4:A2:D3:04:C9:75:0E:FD:A0:B4:78:E3:D0:90
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405679037458E78FDE1C877880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d25a038-5d0c-32dd-b9de-e520f6127158.roa
Signing time: Fri 23 Dec 2022 12:00:00 +0000
ROA not before: Fri 23 Dec 2022 12:00:00 +0000
ROA not after: Sat 28 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 149.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:56:79:03:74:58:e7:8f:de:1c:87:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 23 12:00:00 2022 GMT
Not After : Jan 28 05:00:00 2023 GMT
Subject: CN=0a248b88-e6a8-4e3f-9664-79db03c12067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:62:e7:67:d0:f5:98:5b:13:40:46:ab:17:
d8:64:d3:1a:27:d4:b1:25:0d:2f:aa:20:0c:8f:38:
d6:02:d8:52:60:e4:b6:8c:ce:24:67:35:77:04:80:
0c:fe:48:99:83:92:bb:7b:f9:bb:cb:43:4e:d3:6a:
4f:23:41:25:e0:f2:93:1b:da:7d:ef:5d:38:1f:60:
e3:90:af:9d:f0:af:25:f5:2d:52:62:29:54:61:2f:
83:0a:01:81:84:cb:16:b0:58:88:35:0c:04:24:aa:
bc:95:74:b0:7a:94:43:49:7c:64:03:6b:90:08:fd:
65:4e:7a:f2:2b:8a:05:e6:ab:49:10:f4:64:ab:76:
31:95:d9:64:33:e0:64:17:91:ae:f0:69:dc:5e:8c:
c9:09:2a:e2:99:fc:01:84:41:d1:56:8d:f3:b9:af:
a4:ed:14:2f:8c:2a:02:b1:8e:4f:56:49:35:71:44:
d0:69:93:91:65:d9:8c:7d:de:01:9c:d6:63:ac:72:
f8:71:43:a0:42:3c:54:59:a8:86:7c:65:4f:01:50:
f6:e6:47:f7:1a:d8:10:09:f3:78:6a:c0:7f:64:4e:
53:1e:d5:46:ce:7f:10:b7:c0:9b:e8:f2:c1:0c:c4:
c0:03:bb:6e:27:8f:cf:34:3b:52:8d:d9:52:d1:49:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:CF:6B:DB:7C:C4:A2:D3:04:C9:75:0E:FD:A0:B4:78:E3:D0:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d25a038-5d0c-32dd-b9de-e520f6127158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:43:6c:92:7b:9c:59:14:0f:29:3b:3d:9a:a7:f4:6b:5d:58:
80:0b:46:12:c6:c6:75:65:d1:7e:26:77:fe:fa:f8:e1:c0:e2:
58:20:d6:55:37:f0:87:3d:2f:b8:9f:9b:db:19:be:67:8f:a8:
b4:5b:d8:9f:98:e8:f6:2f:10:68:d5:aa:b3:2e:cd:68:90:11:
81:0a:49:ad:18:e9:f1:49:42:ef:80:79:01:f1:04:c9:b1:8d:
37:92:23:57:b6:85:92:5e:2f:38:58:5a:d1:e6:7f:e4:d7:66:
e9:6b:0c:ec:48:25:07:b0:8c:52:dc:a9:b7:c4:89:c4:76:4d:
89:61:18:b6:a7:73:a7:0e:e4:ec:b9:23:85:7b:e0:23:4a:a7:
d5:3d:bf:da:52:b2:98:1a:a7:c0:d1:e0:42:91:36:e4:9a:92:
40:49:31:f2:e0:69:28:9a:f3:dc:bd:2f:50:87:10:bb:69:5b:
50:2f:c2:77:39:3b:4d:58:f5:6e:4d:8b:61:99:c3:ef:48:87:
3a:92:6b:87:e5:8b:ec:48:01:ca:2d:4b:59:12:d9:f3:ee:e2:
c2:60:7a:14:d8:5f:8e:a1:db:17:73:9f:b9:9f:16:8e:d3:4e:
b9:6d:ef:2a:1a:34:2e:ac:98:cd:80:5b:9b:4a:ab:59:4d:a1:
f6:f5:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:09 2025 by rpki-client