Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad524908-2c52-3dd2-a24a-1815b4a64570.roa
File: ad524908-2c52-3dd2-a24a-1815b4a64570.roa (raw, json)
Hash identifier: Fe7To68aGivtTsiEt5Wn8OEe4LQUBofIAf/9u6d3PC0=
Subject key identifier: 0B:57:B8:35:6D:5D:E2:D0:0E:42:0E:9A:05:BC:A2:0B:3F:40:4E:9D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D66288AEF427F8DE83D18C480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad524908-2c52-3dd2-a24a-1815b4a64570.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:28:8a:ef:42:7f:8d:e8:3d:18:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=356dddf4-fe32-4549-ad2a-f2fc3a1e3da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2b:71:54:f7:b0:de:ce:26:a1:78:98:f5:cc:
56:19:f9:88:a9:34:e6:9f:7c:2a:38:14:e9:74:89:
15:e0:4c:ff:d5:c5:98:9c:14:a6:c5:39:3c:5d:84:
e3:92:bd:86:db:6f:54:10:6b:40:77:7d:18:5a:36:
76:d2:1e:80:07:e3:bd:03:2c:04:ce:79:e3:2f:da:
e1:b0:b8:97:7b:3f:16:33:68:58:2e:77:c7:af:2d:
10:08:d7:69:b7:59:8a:e7:45:68:7e:d3:9d:92:9b:
6b:16:cf:5a:89:0d:e0:90:26:e8:24:b2:e6:63:52:
36:cd:c5:21:1f:a0:09:1a:af:6a:c2:a4:e8:71:7f:
dd:3f:6b:b8:31:d3:2d:fe:dd:10:2b:0e:be:57:b0:
de:15:c3:74:63:b0:fe:b5:3c:66:54:73:8f:81:37:
ca:67:b2:c7:93:d8:fc:64:1c:41:8d:18:71:23:de:
0a:96:e5:5b:57:2a:29:72:e4:9d:e9:b8:2b:18:97:
bd:ff:32:c0:f7:a6:4c:ad:b5:21:b1:5b:38:91:c7:
15:93:38:1d:4c:ea:5d:00:b4:2b:3d:68:9e:02:0a:
39:d4:6a:d1:7e:3f:d0:99:fa:28:c2:f1:16:a7:c8:
09:b5:18:af:ea:6a:73:4c:bb:43:7f:30:f1:cd:f2:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:57:B8:35:6D:5D:E2:D0:0E:42:0E:9A:05:BC:A2:0B:3F:40:4E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad524908-2c52-3dd2-a24a-1815b4a64570.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ef:ab:36:6b:2e:12:e3:20:2a:a8:ae:c6:00:d1:6c:ce:6b:
54:d1:bf:64:08:f9:de:e8:cf:89:2d:98:76:46:13:e2:01:25:
69:41:85:93:4c:39:8a:87:dd:97:04:2e:62:18:af:d5:7b:de:
41:f0:db:08:f3:c0:a3:1c:86:6c:3c:c1:c5:49:ef:e4:7d:1e:
ec:65:7f:09:ef:3a:05:d4:88:d4:1c:04:5d:54:d8:bf:60:15:
c6:1a:70:25:e5:8b:ef:07:96:8d:c8:d3:08:52:aa:f0:b9:b3:
fd:c0:aa:7f:f9:2c:cb:26:16:63:be:b9:98:c7:ba:c6:aa:ae:
df:37:6b:a1:dd:a8:db:a2:e5:cb:a3:fd:f3:b8:b9:32:1a:e2:
a3:ca:91:31:b5:59:53:63:91:d2:af:ed:0b:57:6f:b9:8c:cb:
74:28:11:8c:e6:ac:35:ab:f8:e9:f5:36:c8:ac:0a:a1:9a:05:
14:f3:d3:04:1b:5e:cd:49:66:42:92:8a:e1:86:e7:04:70:cb:
78:fc:3a:20:70:93:d9:55:61:1a:77:8f:77:17:ed:08:e2:be:
2e:fb:28:b1:c2:3f:c8:ee:ad:9d:71:b3:41:58:ec:3a:63:be:
5e:54:ad:8b:3f:33:13:ee:d2:13:0b:44:58:bd:6d:92:35:5e:
14:13:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:22 2025 by rpki-client