Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fdeb2c5-4a42-3b85-aab7-1afeecce2800.roa
File: 9fdeb2c5-4a42-3b85-aab7-1afeecce2800.roa (raw, json)
Hash identifier: eJg0alHdq99ytLReRbOIz1/gsXP9RujH6opFhRU9fMs=
Subject key identifier: D8:F1:BA:3B:2C:7B:C3:AE:EF:29:D9:D8:BE:41:3C:D0:D8:DA:01:0D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053AE76D924C66B264C62D580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fdeb2c5-4a42-3b85-aab7-1afeecce2800.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 160.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:ae:76:d9:24:c6:6b:26:4c:62:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=d6a26b71-acb6-464e-a5db-75dae110dcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:3a:44:0d:66:4e:ff:f4:b6:c6:06:8a:43:
e6:bd:db:72:76:5f:8a:6f:9e:e4:d0:15:a1:23:d7:
5e:a2:fc:e0:87:23:7a:a5:98:01:06:ea:5b:bb:9a:
d5:1e:7a:fc:98:be:b0:56:9a:60:e2:8f:59:e1:42:
b6:ff:ef:db:25:bb:c8:58:c0:47:ad:a2:88:8c:08:
37:83:e0:46:d7:d6:aa:dc:d6:58:8d:98:5c:ff:65:
7c:93:3a:af:a9:25:41:8d:c4:92:a0:5d:c0:81:8b:
d1:71:c0:d1:1c:de:9e:dc:d7:3e:77:bb:d4:36:ec:
64:ec:e8:92:7b:04:88:7f:cc:72:f5:df:c0:54:f6:
9c:8c:76:ac:a5:67:a4:6a:03:f2:0b:7f:7f:f3:58:
5d:fb:12:ed:92:0a:01:be:b7:58:e3:db:50:19:73:
fc:b3:3b:ed:d9:fc:f9:7f:57:2e:86:a5:a0:ef:e6:
9e:b3:80:f3:c8:27:3e:bf:ec:7d:40:0f:08:4f:44:
4f:8b:1f:f2:08:79:08:cc:6d:fb:fa:f1:5b:54:4a:
55:a8:3c:13:d1:f1:f8:a2:33:ce:96:c7:94:a6:13:
66:ff:84:67:12:44:a7:ed:c2:93:97:25:d8:26:d2:
4e:e1:7c:8a:91:b9:5d:d3:fc:5e:bd:c0:e9:c1:9a:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F1:BA:3B:2C:7B:C3:AE:EF:29:D9:D8:BE:41:3C:D0:D8:DA:01:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9fdeb2c5-4a42-3b85-aab7-1afeecce2800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c3:d0:d0:54:85:56:e3:b7:8a:4a:78:2e:40:f2:db:71:b1:
83:16:32:23:9f:e4:d4:69:1e:ae:9d:7d:0d:f3:c0:2a:15:92:
74:7c:33:18:fa:aa:79:ef:4a:95:1b:4d:05:90:7f:13:60:5a:
a0:9a:65:05:6b:0f:cf:0a:6e:a8:1f:18:09:ed:5a:80:4d:19:
c1:31:3d:af:45:3d:12:56:7a:b3:1a:66:6f:27:b8:c7:53:23:
82:a2:23:c1:fa:c6:c3:01:f0:a9:1f:cd:5f:d5:10:ac:55:c4:
08:84:11:56:22:24:9a:9e:91:a0:a2:b8:7b:8d:87:2f:23:68:
62:d1:75:7a:39:17:19:31:8d:65:9f:5a:31:ac:83:0d:a3:c2:
f0:93:93:7f:f2:3b:fa:4a:00:2b:d2:c6:86:fe:e3:f0:a1:12:
16:b3:49:96:61:ac:9f:a4:a9:68:56:5b:2a:81:18:b0:7d:bc:
89:91:ac:8d:13:c8:5c:43:19:b9:f4:e9:8a:9f:05:a4:fa:fc:
4a:c7:5e:de:ab:06:c1:20:93:d9:ba:dc:6d:4a:d3:54:81:e9:
70:d9:12:87:50:64:d7:9b:b3:e7:dc:1b:6a:8d:82:58:f3:23:
09:c6:51:01:18:a7:e2:99:83:7e:99:6d:53:63:68:49:b5:61:
b5:1b:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:15:49 2025 by rpki-client