Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2859085-7d54-3e90-a1fa-7439b6af4a6d.roa
File: a2859085-7d54-3e90-a1fa-7439b6af4a6d.roa (raw, json)
Hash identifier: 59Te7l3riW+0lxlB6biss2ye6ZTxaideTr9iX0DeAKk=
Subject key identifier: 36:A5:11:8A:FB:62:77:6B:16:22:4B:61:DD:1C:26:86:EE:D7:DD:99
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584068F055D0E38A2C887E35FA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2859085-7d54-3e90-a1fa-7439b6af4a6d.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 130.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:f0:55:d0:e3:8a:2c:88:7e:35:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=967a084e-af3f-4976-9108-0e62025d9bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:89:ad:a8:7f:88:12:e3:52:06:f7:4c:1a:
0b:1d:8c:9f:53:2b:88:c7:93:a5:58:10:3d:e8:82:
cc:68:78:cf:18:d8:16:79:fa:71:3d:13:d5:76:34:
90:46:9a:44:1f:40:97:a9:ee:c4:6f:6a:e5:a1:1d:
da:74:7f:1b:41:b8:1d:b4:c3:3f:47:fc:13:e1:ae:
c5:12:ca:cb:ff:b9:1d:33:87:30:c0:36:ca:8c:fc:
d5:e3:cd:42:6d:b8:5f:4a:bf:bc:8c:ee:a0:d4:ab:
04:8c:2c:71:2d:78:62:42:1e:85:18:9a:9e:e8:6d:
b6:67:69:dc:bc:5b:69:7d:70:8e:9b:fb:5c:a9:62:
25:cf:21:95:6e:c0:51:f8:3d:94:be:ef:d2:60:e2:
71:3f:e8:3e:33:46:eb:63:e5:98:2b:db:78:2c:e1:
b5:e4:96:86:ba:e3:9d:94:f4:10:3e:65:92:ca:e7:
95:5b:85:d4:65:a0:da:22:ff:f8:29:d8:4b:1b:cf:
58:65:11:c2:53:95:f4:1c:9a:b2:91:e5:03:d2:1e:
ce:a2:62:a2:4b:ea:e8:a1:e9:c8:36:c3:4e:e5:dd:
ca:2d:e3:e5:c6:24:6e:48:86:83:b5:58:da:74:26:
c1:99:a5:08:ea:df:b6:19:4c:2e:fa:d7:ed:61:55:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A5:11:8A:FB:62:77:6B:16:22:4B:61:DD:1C:26:86:EE:D7:DD:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2859085-7d54-3e90-a1fa-7439b6af4a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:32:c1:be:8f:fd:3e:90:7e:bd:27:87:25:39:08:27:5e:8e:
2d:11:d2:3d:02:d9:72:aa:9c:ec:ab:1b:d5:5c:4d:f7:0a:0b:
a4:ac:a2:37:e0:80:ac:68:9a:d4:47:ce:b1:62:bb:7f:4a:31:
de:62:9d:7d:b7:73:2c:14:32:8b:af:20:98:df:ce:f0:dc:fd:
8e:e5:d3:05:63:f5:5c:b9:05:dd:01:3a:f4:8b:1f:37:68:20:
05:69:2a:2f:b5:30:90:44:83:38:a3:33:7e:95:93:c1:e5:8b:
c4:da:65:3a:57:b3:5e:2e:00:33:01:de:3b:81:ff:cf:ec:bd:
4a:5d:21:d1:85:37:0e:fb:58:cb:2c:f3:a5:1f:40:1f:e5:9e:
86:ba:43:c8:c0:b6:7e:fe:0b:be:34:27:6a:ee:db:6f:73:75:
b4:bf:b5:cc:1b:17:10:04:2a:31:09:b3:71:0c:26:38:4f:d9:
1e:64:07:ca:eb:3d:69:24:8d:ba:41:cf:d4:17:4a:ab:20:97:
f4:37:b0:24:97:4e:5f:84:f6:31:51:3b:e2:e7:cb:a9:e7:7b:
2f:eb:13:b5:d5:74:6e:64:f0:c6:98:1d:6a:ee:fd:17:a4:e3:
ed:37:17:ff:82:98:1e:9f:28:a3:af:8a:9f:7b:d4:a8:c5:45:
d6:a5:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:43 2025 by rpki-client