Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8b25d10-6283-3e2e-91d3-daa509486039.roa
File: a8b25d10-6283-3e2e-91d3-daa509486039.roa (raw, json)
Hash identifier: 3w+PXpwua+RwEnF0GE6u4x+riacq2oF6uj+ZLfWdXmY=
Subject key identifier: F4:C3:16:8F:F2:1A:D5:D5:8E:BD:B8:5D:CA:63:22:AC:3D:3F:1E:F0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE6B78723F46A8E1D5408CA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8b25d10-6283-3e2e-91d3-daa509486039.roa
Signing time: Sun 13 Nov 2022 12:00:00 +0000
ROA not before: Sun 13 Nov 2022 12:00:00 +0000
ROA not after: Mon 19 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 168.203.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e6:b7:87:23:f4:6a:8e:1d:54:08:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 13 12:00:00 2022 GMT
Not After : Dec 19 05:00:00 2022 GMT
Subject: CN=3ea93f36-40dc-4b5f-9f43-a1d8072d74f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:11:74:01:39:13:49:34:e3:a8:eb:64:14:f4:
d0:ca:a8:98:8d:fb:92:89:aa:6c:17:91:58:9c:da:
a1:d5:81:6f:6b:fb:7f:1c:e3:43:2d:44:f9:6f:9b:
b3:a7:8c:dd:97:22:f0:72:05:14:0e:09:29:f8:a5:
e0:11:ef:e6:6d:d3:b7:05:25:2f:f3:cb:85:c2:32:
59:29:3d:3d:9b:4b:b3:f5:62:b5:10:04:46:cb:06:
11:67:f6:64:d1:a5:34:3d:e9:2e:61:04:97:a9:7e:
23:58:07:48:03:0f:cf:3a:95:d0:fd:da:0f:b7:0f:
b7:f1:31:9b:14:fe:3e:6d:62:16:7a:07:4f:a4:be:
68:e7:14:6f:26:1c:90:e1:a7:f3:bd:8c:42:a1:3e:
82:4b:3b:af:a4:71:f3:9c:2a:69:70:4b:e8:f3:5c:
72:3e:b0:50:97:95:46:db:a2:3e:56:2a:93:d6:4a:
7e:b9:fa:9c:68:86:db:f9:77:4f:0c:2e:1a:37:f6:
84:b7:c3:a6:0b:e8:1d:17:c3:98:78:84:89:e9:c5:
95:40:51:e2:9c:87:fe:1f:18:5e:d4:a9:b8:cc:90:
b5:13:4e:3f:95:f3:72:23:3e:74:84:80:61:51:1b:
06:1d:6e:e6:b2:e8:b6:c6:6d:db:f4:b9:19:57:8c:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C3:16:8F:F2:1A:D5:D5:8E:BD:B8:5D:CA:63:22:AC:3D:3F:1E:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8b25d10-6283-3e2e-91d3-daa509486039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.203.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:8d:6e:9b:8a:c1:5c:0e:20:d8:6d:d8:49:c5:d3:c9:b4:64:
61:72:67:91:c2:8b:02:71:df:f8:3f:56:50:4a:d0:36:1c:58:
d2:61:db:e2:af:b3:98:08:32:4e:c3:e7:41:e9:aa:b5:ad:d9:
8e:11:5d:4f:26:7b:89:4d:5f:77:5f:8c:a6:80:33:7b:62:c0:
eb:3f:f5:bf:02:3b:bd:5e:f3:a9:d2:1c:e9:28:11:a8:45:54:
31:bc:8d:90:15:ae:32:e0:a5:8c:07:77:5e:87:85:18:73:70:
30:1a:3a:c5:7a:e1:88:c5:71:cb:41:6f:dd:57:09:22:1a:de:
c1:1c:c5:14:3b:e4:70:be:75:20:db:bf:da:fe:35:91:9d:ec:
c4:3f:0c:db:25:e7:1d:9d:96:45:37:2b:e6:16:77:22:56:4b:
c1:be:fe:a9:d1:54:4a:c0:d9:a3:cd:6b:d4:ec:a4:5c:c2:c8:
5d:9e:90:25:4f:85:82:66:ed:3c:64:93:3f:71:81:29:05:24:
f0:db:5c:61:52:c5:7a:3f:47:b4:1f:5e:1a:83:fb:a4:1b:90:
89:83:7d:cb:32:db:bd:00:cb:a4:72:cf:3b:68:e8:ba:86:45:
58:c0:0f:36:42:fc:24:81:11:2b:3a:05:9b:cb:7f:fe:ea:81:
a3:1d:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:38 2025 by rpki-client