Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f171d36-139f-3933-9e30-9a6471041e7d.roa
File: 9f171d36-139f-3933-9e30-9a6471041e7d.roa (raw, json)
Hash identifier: /3c8fxJOQ3aWXDYAdEZjvrzRE3MAtQyrqBgQdkSHZmE=
Subject key identifier: B6:DE:E4:1C:A2:11:26:D3:25:D4:5D:8F:50:8B:6A:E8:D6:6F:16:F3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F16B3E415A925A5ACE35F7A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f171d36-139f-3933-9e30-9a6471041e7d.roa
Signing time: Tue 30 Aug 2022 20:45:07 +0000
ROA not before: Tue 30 Aug 2022 20:45:07 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:16:b3:e4:15:a9:25:a5:ac:e3:5f:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 30 20:45:07 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=7a8e40d5-dc64-4436-aa31-dd87849e2735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:3b:be:f7:40:94:eb:ba:0b:00:c1:9a:6d:
09:18:48:ba:0e:d3:d6:8f:78:e6:cf:c1:fc:63:23:
31:a0:0f:42:98:22:ac:72:2e:dc:1d:97:44:b7:5b:
46:ab:7c:3b:4d:68:ba:33:01:e2:52:66:8e:d5:a2:
24:82:7a:8d:fe:81:14:03:61:ed:da:1c:a3:6e:55:
ca:15:01:2c:a4:c2:26:ea:f2:eb:b6:df:89:2c:cc:
32:f1:ed:f1:9f:f4:77:72:e2:02:b2:55:9c:18:85:
f8:55:b3:b8:4d:a4:05:74:e2:a7:89:ea:4a:bc:f9:
69:bd:b0:a2:0c:df:67:53:ad:c2:3f:79:66:c5:c1:
03:01:0b:bb:0c:09:f1:3d:e5:f6:ab:b2:9f:28:82:
fa:a5:a8:c8:67:df:7c:0b:8f:e8:8a:db:d7:cd:36:
c7:68:67:fa:64:cc:98:d0:fb:af:a6:cd:df:af:39:
db:97:ec:e1:40:2f:de:30:50:a0:69:75:5b:31:20:
8d:80:71:be:18:49:ca:b4:13:68:8c:6a:d1:9a:ea:
20:1f:d1:11:53:c5:7a:5f:ce:83:af:23:22:e5:77:
73:51:f0:7a:70:2c:d7:73:9c:02:98:0e:8f:ee:d4:
cb:68:ec:b0:0d:6b:de:96:0e:92:84:0e:fa:18:76:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:E4:1C:A2:11:26:D3:25:D4:5D:8F:50:8B:6A:E8:D6:6F:16:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f171d36-139f-3933-9e30-9a6471041e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:b4:5b:11:6d:f9:5d:ea:ed:43:0a:67:d7:70:b5:ef:b1:b2:
2a:a2:2f:02:90:76:65:7e:0c:60:e8:b3:ab:e4:c7:b9:37:c6:
f6:af:71:59:b2:e0:c7:66:d9:46:07:cb:8a:69:47:b6:de:e9:
b5:b5:cf:cc:04:3e:f5:e5:51:0b:42:d2:9d:92:81:f4:e4:d9:
37:ef:3f:25:b7:cf:c4:84:1a:37:19:66:98:05:72:15:9f:73:
45:3d:11:c6:28:ea:74:f2:ad:2b:a4:c1:7a:6f:ca:0c:6b:7a:
61:f9:8e:50:28:03:15:33:fc:0e:57:fb:3b:18:64:fc:eb:d7:
89:0a:9d:99:ad:6c:d5:d1:d0:95:ee:a2:66:94:d4:96:67:3c:
3d:05:4a:b2:3e:f2:ad:3e:50:e4:fe:32:b8:f7:27:de:ae:20:
76:5a:b5:f8:e4:dc:da:e3:f9:49:d4:53:fc:ae:53:8c:48:9a:
3e:77:df:b4:40:f7:61:7d:20:fe:54:cc:3b:92:4b:39:d3:a9:
79:4d:f2:7b:92:fc:d5:b0:ba:d5:4c:04:aa:d9:13:04:b1:73:
89:b0:6d:f6:e2:66:12:31:89:60:c6:bc:e0:ba:a1:48:3f:bf:
a1:36:6f:50:99:0e:a4:8b:57:5c:88:40:36:fc:91:c9:73:5a:
e1:76:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:43 2025 by rpki-client