Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a99df38b-c5de-3850-9c4a-1d07f74f4089.roa
File: a99df38b-c5de-3850-9c4a-1d07f74f4089.roa (raw, json)
Hash identifier: Wt0sZg8RSulbXXfzqg866Bw58dAV3q+aRIPYlhZpseU=
Subject key identifier: 4B:51:08:84:7D:98:AC:01:29:9D:B0:62:60:54:7F:7A:1F:AB:97:F7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2D0971A960782C16646F6EE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a99df38b-c5de-3850-9c4a-1d07f74f4089.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 153.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2d:09:71:a9:60:78:2c:16:64:6f:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=37477995-1f4f-44bb-86e1-5110f030b9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:ab:69:f5:ed:70:93:29:49:cb:4c:97:5d:
9a:8b:81:b6:1b:22:23:69:18:67:f1:b2:8a:07:31:
c0:46:38:10:89:47:c9:cf:78:0b:ae:09:a9:ed:eb:
d8:f2:4a:ee:63:be:ff:b5:87:ee:c3:d3:1c:21:9a:
d2:f6:f0:14:26:6c:34:b9:30:3f:f3:b4:66:22:b7:
d4:0d:69:f0:d6:14:be:2b:37:de:fd:a2:4a:e4:fd:
9e:be:4d:e5:e4:51:3d:37:b9:80:5f:83:b5:16:3d:
38:5c:0c:cc:4a:1c:92:a2:ca:89:c3:fd:8b:14:c3:
b4:45:9c:34:88:e3:13:12:03:45:9b:d1:a1:dc:14:
54:06:11:dc:2a:db:48:b8:5f:bf:5f:83:5b:95:6c:
f0:af:5b:b7:5b:7a:df:68:0d:8f:e1:3e:3a:e0:49:
3b:06:c4:19:b1:1c:92:23:0c:b1:a5:db:10:b9:e2:
fd:df:83:2c:9c:6e:2a:f2:da:0b:b0:33:7b:6d:df:
fa:99:1e:6a:4a:8b:e4:e0:be:b7:88:34:91:41:84:
b9:b2:4d:27:ff:2f:a2:de:6b:dd:6a:57:b8:f7:61:
e5:4a:ca:bf:20:be:d7:e5:ca:02:ef:16:41:fe:1f:
5c:32:93:74:5e:31:51:24:6f:16:13:59:b7:6b:f2:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:51:08:84:7D:98:AC:01:29:9D:B0:62:60:54:7F:7A:1F:AB:97:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a99df38b-c5de-3850-9c4a-1d07f74f4089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:67:b0:1e:6a:37:da:39:cd:c4:4c:dd:a4:f6:03:09:22:17:
2b:85:f8:94:bb:45:88:c6:5a:51:a5:0f:fe:d4:4f:80:50:d6:
c4:63:75:46:c5:49:90:55:f6:8d:22:34:d4:3d:de:13:e9:f8:
21:92:3c:3c:0b:ef:d5:b8:17:b2:11:ec:c4:51:fd:71:c0:41:
0a:18:46:92:ac:cb:c1:62:f9:69:ef:a4:30:21:95:dd:13:d8:
5d:71:11:7d:84:a3:ff:3c:37:04:7a:fb:e5:c7:0d:1d:46:aa:
33:eb:33:72:11:2f:56:d5:fc:eb:de:86:05:92:93:a5:84:d2:
b7:bf:0b:39:4f:d5:85:56:7c:3d:e0:f2:3c:33:a5:c3:30:a4:
c7:cb:bc:55:c1:58:c5:33:f1:d2:c3:95:2d:06:11:a3:6c:98:
54:45:60:b2:82:d3:19:cd:00:df:f5:2a:73:17:9c:f9:16:e2:
56:d7:bc:1a:13:3e:da:7f:63:51:43:54:93:43:e4:9c:63:5d:
89:d0:48:19:82:0a:8d:b2:e5:23:ee:80:db:f0:c1:ec:09:7d:
e5:30:d5:f8:57:32:c6:97:04:31:2a:e6:0a:e3:d7:b2:c7:ad:
9e:5d:96:e3:f1:77:9c:3a:ee:c4:1a:08:4c:56:87:73:fa:a5:
ad:90:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:34 2025 by rpki-client