Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc76042-ebf0-3906-a1d4-97ae76cbcab9.roa
File: afc76042-ebf0-3906-a1d4-97ae76cbcab9.roa (raw, json)
Hash identifier: eQoweLHNoGxRg52k3d0N26oh2k2FmjQeXlZJVz9oM/g=
Subject key identifier: B4:CA:FB:86:00:80:D9:A9:A4:BB:27:7E:81:B8:7F:59:6D:03:30:CD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400E100C6504DDC29DCEE91680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc76042-ebf0-3906-a1d4-97ae76cbcab9.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 158.252.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0e:10:0c:65:04:dd:c2:9d:ce:e9:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=64f0b61f-e87d-4a05-b59b-73174fa4f149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:4c:39:f1:7b:7d:7a:c2:80:b3:68:f7:90:
ea:5d:f3:ea:2b:d9:6d:d6:14:f9:06:1f:17:24:41:
87:df:24:b4:4c:ae:0d:d5:f5:5b:87:1e:df:8b:c0:
ed:9d:ff:e3:9c:c2:9b:b8:a4:03:8a:49:7f:11:24:
8c:88:2a:9a:dc:d2:8f:1c:d0:4f:1c:77:fc:f3:d9:
d2:73:13:b8:33:93:23:9b:6e:d2:08:91:de:49:e7:
16:c0:3c:d9:0b:53:1a:a8:a6:ee:b9:44:f5:2e:d0:
b1:6c:7d:96:e5:a3:e3:23:53:3f:e2:67:a6:fc:55:
57:01:06:96:2e:35:94:3a:a1:39:99:32:b1:61:aa:
c9:b5:70:e2:9c:fb:aa:c8:57:03:5c:01:d7:67:ac:
af:5b:10:04:17:97:2d:56:f1:03:ac:c1:50:08:6a:
78:1b:42:95:a0:12:93:19:a4:f1:42:37:ce:07:f4:
18:5a:fa:7a:b6:d1:e6:e0:40:90:9d:a7:b6:40:fd:
61:cb:a7:e2:ee:05:a7:73:82:0d:6f:72:9e:e1:94:
59:dc:7b:84:2b:b2:97:6c:9c:08:65:04:19:7b:4b:
f7:0c:78:78:3a:a5:61:86:62:ac:78:7b:d3:2c:be:
30:9d:06:af:62:48:98:91:2c:14:e0:87:0e:36:62:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CA:FB:86:00:80:D9:A9:A4:BB:27:7E:81:B8:7F:59:6D:03:30:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afc76042-ebf0-3906-a1d4-97ae76cbcab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.252.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:e2:52:85:1f:f9:57:a3:5c:1e:08:a6:bd:19:8c:31:a7:1c:
32:24:0d:16:ef:a5:9e:c0:2d:48:4a:11:6d:79:ff:19:45:65:
b0:8e:49:6b:fb:1e:39:66:ea:81:e6:a9:68:6f:bb:a7:c0:4f:
0e:ac:f1:15:f6:27:02:a1:47:7d:95:60:f4:b3:28:63:c3:1d:
1c:5e:ab:27:f1:54:f6:eb:d1:1c:c0:b2:88:52:54:3f:14:9a:
18:68:49:2a:65:38:de:8b:d1:ae:4a:9a:ba:70:ba:94:e1:30:
07:d2:29:d7:ab:c3:83:54:f0:74:3f:3d:90:29:a8:72:01:e7:
0c:96:ac:13:10:09:c9:54:c5:df:86:ac:29:e7:86:fe:3e:0f:
40:37:91:23:5b:2b:7a:1c:dc:fe:ba:c9:73:df:5d:cb:58:15:
3a:06:e1:f9:46:63:56:9f:db:ec:8c:e1:a1:67:0f:76:79:aa:
0e:b1:cd:41:ec:a0:6b:97:62:c2:45:30:d3:a9:3e:cd:e0:fe:
3c:82:18:e8:9c:af:d8:5d:34:a0:c3:a8:e4:7e:72:06:69:0d:
e4:b4:6b:f4:26:f6:03:db:c9:59:10:b0:83:22:ce:d7:53:d2:
e5:5b:a0:4a:a0:c3:8a:3e:38:2e:c2:d9:f4:d0:c9:46:dd:87:
8b:06:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:59 2025 by rpki-client