Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5a70200-39f5-3ceb-8f5f-2d44b3b7247a.roa
File: a5a70200-39f5-3ceb-8f5f-2d44b3b7247a.roa (raw, json)
Hash identifier: V4gevQsVtOscpI+W73dmbWCB3rMRY0IfWrN9HVdqRBQ=
Subject key identifier: 42:E3:39:0B:DB:1D:32:37:C8:50:31:00:2D:D1:C8:6A:66:3A:88:E0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E78FFDA927FF676847A12E080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5a70200-39f5-3ceb-8f5f-2d44b3b7247a.roa
Signing time: Tue 05 Jul 2022 12:00:00 +0000
ROA not before: Tue 05 Jul 2022 12:00:00 +0000
ROA not after: Wed 10 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 143.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:78:ff:da:92:7f:f6:76:84:7a:12:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 5 12:00:00 2022 GMT
Not After : Aug 10 04:00:00 2022 GMT
Subject: CN=9bfe0522-c925-43ad-ba55-da9f7b18c009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:d3:51:0d:13:1e:49:6d:2b:d8:c4:74:81:
02:fb:ff:b6:00:de:d9:05:3a:2e:cc:dc:0b:c1:fa:
12:08:f8:28:72:ac:e4:0c:d3:e2:63:da:fb:f4:66:
7a:73:a5:2d:d4:02:16:a2:a1:ee:38:23:76:13:4c:
c4:35:82:22:32:8b:a9:78:80:48:66:09:9b:53:1c:
84:1f:13:9d:85:af:24:4f:0b:92:37:15:d6:04:8e:
48:dc:5a:9c:b6:4f:84:9f:4a:e6:42:9e:85:f4:c8:
3d:45:6b:3d:2c:dc:52:ef:92:b1:4d:76:74:84:64:
3b:91:ca:34:4e:04:88:44:2f:ec:f2:4f:93:60:42:
ed:8d:8d:47:52:d3:0e:0b:3b:08:4e:63:04:d4:0e:
32:43:70:8c:0f:fe:47:45:9f:cc:99:af:7d:25:6e:
e9:96:aa:48:25:cd:24:46:b2:dd:bc:9b:01:0e:d1:
b2:c3:e5:a4:2b:b6:2a:f0:9d:2c:65:c1:17:8c:2a:
c0:f9:cb:49:3a:f7:ea:eb:84:43:df:16:99:6a:ae:
46:94:6a:29:06:03:fd:81:84:95:46:28:e9:46:ed:
ca:13:4d:76:1c:3f:db:81:2b:76:a2:2a:01:e5:20:
59:63:1a:58:d1:39:66:76:f0:15:31:85:bb:c9:d9:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E3:39:0B:DB:1D:32:37:C8:50:31:00:2D:D1:C8:6A:66:3A:88:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5a70200-39f5-3ceb-8f5f-2d44b3b7247a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:ec:6b:03:78:60:dd:8b:d0:11:f0:ec:fe:92:00:85:1a:31:
65:35:03:6e:30:24:ff:f4:3b:4c:77:6d:2d:43:14:51:6d:c7:
01:03:87:a9:cc:80:5a:ef:4d:b6:5c:85:eb:16:95:ab:5e:89:
6d:37:2f:61:28:04:e2:bf:9c:25:0e:6b:44:3d:44:e9:f3:d6:
95:62:63:fe:5a:a0:01:20:f1:89:83:ab:34:07:05:e1:b4:49:
94:0a:a6:ee:57:b9:ac:2c:ac:e4:cf:03:d4:56:2e:59:a3:66:
ea:fe:f6:4e:d2:0a:ed:7d:21:c2:a4:e0:36:0f:a6:0f:66:9a:
88:f0:10:04:ff:9d:ca:b8:61:96:65:2a:59:40:ed:b0:43:68:
b1:7b:9e:e2:7f:3c:9d:4d:0f:31:16:c1:ec:c7:c6:0b:1b:fe:
95:aa:54:98:b9:97:ba:cb:9e:59:12:ec:e0:26:f8:61:6c:80:
37:89:8c:25:be:41:5f:74:29:7a:20:45:f4:d5:a9:85:07:4b:
0f:79:ce:96:85:2d:76:0f:b1:ac:03:31:a1:01:f8:50:52:10:
03:25:e7:18:b4:f6:55:95:50:86:7c:67:aa:44:f3:99:34:ac:
d1:3e:99:93:59:9a:66:06:ab:7e:09:8b:e7:78:6d:c3:c2:40:
96:2f:c4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:03 2025 by rpki-client