Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f1b6cba-73a5-3619-8239-cd1c01cc93af.roa
File: 9f1b6cba-73a5-3619-8239-cd1c01cc93af.roa (raw, json)
Hash identifier: kQjJ7pm7UYt7ZwwnSmvOb6Qxm5kmRb9FWvINmxCIbMc=
Subject key identifier: 9D:1A:B1:C0:B9:27:C5:51:5B:FF:ED:50:36:66:8C:DB:98:B1:2B:08
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400381723A19DA8390314A9898
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f1b6cba-73a5-3619-8239-cd1c01cc93af.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 168.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:81:72:3a:19:da:83:90:31:4a:98:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=e1fe341d-2ba1-4b3e-a0fa-b209609b354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:40:96:7d:f1:8c:92:dc:66:96:65:8d:91:
0b:97:b0:be:a4:cf:bd:8d:1c:52:df:28:82:1d:e5:
94:cc:e0:9c:78:0e:36:fe:4b:bc:9b:41:58:84:b1:
30:4e:22:42:65:87:ca:ce:1c:ae:e4:73:10:47:61:
5a:ae:f2:21:40:da:6b:05:e4:54:e1:b3:ad:26:34:
b7:dd:c9:57:74:7d:d6:7c:91:37:cc:7b:df:29:96:
8a:db:40:a7:40:a5:bb:6c:6c:9d:75:d0:11:48:6b:
2b:af:96:49:96:eb:48:a7:76:30:a1:60:60:dd:4a:
ae:39:6f:dc:11:e4:1c:f6:08:5c:3e:6b:6b:9f:01:
4e:d4:6b:8e:bd:06:35:6a:c1:51:79:4f:d3:28:55:
92:98:a1:38:34:49:57:b6:96:93:84:62:35:e9:c6:
a4:ce:bc:16:f2:23:12:a5:3c:6a:79:54:2f:c8:53:
2a:3d:c4:df:1d:15:22:a4:ba:26:89:40:f4:90:dc:
3f:07:b5:7e:81:17:18:45:ba:84:30:39:48:c0:59:
ca:14:33:09:fc:e5:dd:13:86:b5:04:08:a9:b5:72:
f2:1a:25:e7:b8:87:29:58:f6:8c:4c:8e:81:24:e1:
03:32:67:b0:30:d0:cf:3b:92:67:f6:71:0d:53:33:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1A:B1:C0:B9:27:C5:51:5B:FF:ED:50:36:66:8C:DB:98:B1:2B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9f1b6cba-73a5-3619-8239-cd1c01cc93af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:88:8b:41:d8:af:dd:e4:12:40:8e:f3:5b:aa:9c:62:a7:11:
cc:b1:01:70:eb:7a:44:69:1e:77:e5:f3:c1:56:51:34:d0:77:
09:04:d4:22:66:34:8b:6d:fe:e9:f9:d9:6d:25:6a:ae:98:7d:
f3:cf:a7:e0:2e:23:a1:34:37:9d:43:b0:d2:1b:39:83:7f:43:
9b:06:76:2a:a1:29:66:ea:5d:ff:34:0d:c1:91:48:d7:29:d1:
cc:eb:ca:77:de:00:7b:10:6a:8f:6b:ec:b4:4f:11:a9:40:09:
65:56:ef:8d:77:2d:b5:83:3e:be:31:cf:10:f7:83:74:1e:7a:
98:e5:a6:1e:c9:6d:3f:3b:61:bb:2d:9f:27:bd:66:33:bc:1f:
56:2d:4c:cd:5b:b6:58:71:58:f4:ff:bf:07:f5:90:c6:00:db:
0e:40:80:97:3e:56:d5:86:75:da:78:14:b5:7e:71:53:ac:b6:
00:4d:6b:99:f8:56:d9:d4:66:f5:69:63:8c:06:7d:9f:54:89:
da:48:11:c8:c0:f6:21:3d:47:c7:10:22:74:e0:88:3c:32:dd:
5b:fb:2e:69:bd:dc:87:7c:69:46:7e:e4:44:f2:7b:a9:09:4b:
56:c8:90:6c:ff:bd:23:55:3f:99:34:fa:15:6b:d0:55:d6:80:
51:10:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:51 2025 by rpki-client