Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a709ef8c-d130-397b-a833-dbd69b4f632a.roa
File: a709ef8c-d130-397b-a833-dbd69b4f632a.roa (raw, json)
Hash identifier: BPyDlFUzNVvVzX/USoa/NoteCKflOaFkTj/eU7IP9vk=
Subject key identifier: 38:71:74:06:B2:16:18:FA:52:60:B0:53:7B:2C:41:BE:00:CE:90:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403824811C9A905ECDE31C8580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a709ef8c-d130-397b-a833-dbd69b4f632a.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 173.83.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:24:81:1c:9a:90:5e:cd:e3:1c:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=cf2c7f3e-75c4-425b-a11c-58862d877d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:cc:44:c4:60:88:c7:56:8f:2b:51:dc:65:
61:8d:b4:de:2c:ea:7e:f1:ba:e8:ec:77:06:78:cf:
9a:a2:fd:d9:40:ef:78:5c:43:0f:bb:fe:cc:a0:45:
f7:4c:7d:b7:49:dd:db:c9:a9:ad:02:dd:07:9c:3d:
35:bc:14:ab:de:94:5a:3b:18:dd:30:a7:1a:44:0f:
d8:58:b9:90:c9:2b:05:54:9e:c6:25:36:1c:ff:ec:
0a:d3:cb:10:6c:bd:d3:81:f9:36:2e:95:19:6f:56:
b4:d0:e5:fc:b1:30:ad:dc:aa:d5:1a:e9:b4:ef:ba:
46:7d:2e:ac:5e:d3:27:f9:78:1e:b9:57:f4:bc:ff:
16:5b:78:59:6a:0a:c0:9c:d8:1b:1c:a1:7a:66:af:
4e:98:43:79:44:fc:29:ac:b7:48:d6:7f:ab:00:cd:
f3:cc:92:e4:7c:28:97:77:84:c4:9b:74:3c:fd:0e:
9e:13:66:fc:f5:f1:af:00:12:e5:64:3f:7d:37:a8:
12:0e:c1:bb:4f:cb:99:98:9f:66:ac:ca:32:df:2e:
5c:9e:ff:37:15:0e:df:0b:e8:6b:bd:7a:e2:e2:c2:
e6:50:49:59:57:ea:ff:cd:cf:d2:11:6c:67:7c:ca:
0d:d6:67:e7:63:b9:67:5e:d7:83:2e:45:f9:42:2a:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:71:74:06:B2:16:18:FA:52:60:B0:53:7B:2C:41:BE:00:CE:90:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a709ef8c-d130-397b-a833-dbd69b4f632a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
173.83.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:cf:ef:5b:67:bf:da:cd:c1:e6:76:6d:ad:04:fe:6e:43:ff:
23:c6:ae:97:1f:2b:82:8a:72:0b:17:11:5f:02:12:10:fc:d7:
c7:c7:66:63:4a:69:91:17:40:00:75:b6:23:69:af:36:fb:52:
db:c8:d6:bb:15:29:a1:62:5a:35:ed:10:97:a2:f0:73:3a:f4:
f6:f6:20:5d:69:5f:f5:d1:9f:bd:72:11:70:b3:1f:11:7d:7d:
e2:78:e7:92:6c:7f:1e:9d:d1:38:a9:ed:29:3a:ce:bc:99:27:
8b:0a:0b:ee:73:26:a8:b8:a5:3d:61:4f:34:70:00:51:4c:5a:
15:d1:7f:29:aa:af:62:65:39:67:c3:32:cc:94:12:d5:03:e0:
a5:dc:22:70:2b:77:00:5a:e0:e5:9d:60:79:08:eb:a1:59:03:
2b:e9:92:85:c0:92:e0:31:b0:0a:ab:59:29:52:46:5a:a1:af:
a7:00:45:b8:74:95:31:a8:42:3d:6a:07:b9:32:ca:18:21:4b:
73:24:6c:f1:ff:6d:ea:fc:78:da:ff:31:db:3b:a7:75:3d:8f:
3f:56:ad:47:be:69:23:c8:61:00:4e:64:08:8b:30:2c:d7:9a:
d7:ad:e6:45:c5:39:ee:e2:3c:11:4d:3e:e2:9f:ca:5d:03:bf:
f2:85:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:39 2025 by rpki-client