Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af20c27c-56f4-3e65-9685-3845a5afe376.roa
File: af20c27c-56f4-3e65-9685-3845a5afe376.roa (raw, json)
Hash identifier: JCMHa3N2RU9n+/6TqT6GfgLcT+isp4ZN2mdNWQiKG8o=
Subject key identifier: 97:74:AB:6B:7E:B8:21:00:5C:E1:AD:54:BC:5B:84:0A:80:8E:6C:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584073259E9F06F5A8DAE69D6F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af20c27c-56f4-3e65-9685-3845a5afe376.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 166.80.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:25:9e:9f:06:f5:a8:da:e6:9d:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=e57e2391-1621-4eac-89fa-42fcf2da6187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:fb:ee:70:9f:10:08:00:77:9d:f5:85:df:
78:d6:b4:f8:ac:94:4e:bb:d5:c1:38:84:1a:a5:31:
65:b4:4a:1f:be:94:9e:93:fe:6a:76:3e:05:5b:a4:
ab:3d:10:ad:42:f7:5e:5c:9a:e8:46:69:f2:5f:1a:
43:53:ad:84:48:b7:ea:77:f1:b6:7a:f2:6b:ea:29:
8b:b5:9c:c5:c5:9b:9f:f6:d7:9b:0c:d1:b1:c2:f0:
2f:15:41:06:9f:9a:e0:8b:cd:3d:fd:bc:f9:ba:82:
30:7f:b4:eb:e4:ba:28:86:50:2a:8e:72:4e:65:2e:
09:8c:52:95:f6:fc:d4:18:94:77:90:0a:16:ac:e6:
5d:38:d7:0e:94:16:f4:b2:7d:f9:5d:9c:cd:3f:8e:
56:5c:f0:39:7f:c6:e9:6e:a8:3c:06:41:1a:d6:b0:
a1:d4:26:f1:47:97:7d:0c:96:ce:77:4c:d2:00:cd:
46:ee:7f:f6:3c:17:25:33:f1:2c:2f:63:38:7f:6b:
b0:b8:59:c9:e7:75:b5:bf:f8:13:3b:af:48:03:e9:
fa:a8:82:d5:48:37:73:fc:1f:b8:1f:cb:bf:a8:c8:
6b:0a:35:b4:d1:f3:13:af:07:51:5b:11:98:35:2d:
0b:2f:bc:50:11:c7:c3:46:8f:5b:a7:7d:e7:be:6c:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:74:AB:6B:7E:B8:21:00:5C:E1:AD:54:BC:5B:84:0A:80:8E:6C:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af20c27c-56f4-3e65-9685-3845a5afe376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
166.80.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:87:46:d3:b0:47:b7:a6:9c:47:65:0e:fc:a8:01:cc:4b:16:
23:a3:14:fa:ac:ae:47:64:d3:45:21:70:8d:54:fc:b5:b1:d3:
61:07:5a:47:5e:e0:68:34:78:d9:ce:8a:92:27:eb:6c:77:94:
bd:ae:73:a2:62:ce:58:0c:4a:5d:ca:7c:4e:a1:03:b3:d7:0a:
27:98:c2:64:9c:ea:31:1a:c1:9d:59:01:dd:ef:a3:e0:b8:81:
5a:a8:a7:b2:5f:a1:18:b9:6b:79:5e:67:9f:90:5b:72:20:47:
e2:f2:97:f9:57:5c:7a:4a:c0:6f:f9:ac:a1:16:36:1d:78:b3:
7f:6d:21:1c:98:06:84:66:1f:4e:a5:83:67:0c:60:ff:c4:f1:
b9:63:58:9a:8f:d9:a7:43:ac:72:dd:f1:ed:19:2a:85:55:71:
ff:05:e4:2c:d0:d8:85:5a:cf:1b:61:89:e3:f7:34:60:c4:c3:
c2:4a:63:80:5a:26:06:4a:46:c3:bf:f9:54:1b:8c:ab:3b:e4:
8d:36:70:bb:ad:81:61:6c:a2:04:b2:7e:61:53:ba:aa:9c:22:
cd:4d:34:a0:2d:18:3a:79:c2:4f:9d:b1:26:45:11:4b:92:f1:
7f:8f:e1:ea:de:4e:c1:9d:4f:75:c0:da:53:70:ea:d0:8c:3d:
00:92:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:50 2025 by rpki-client