Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b19af8de-8291-3bda-8d0b-9fa4fa2867c1.roa
File: b19af8de-8291-3bda-8d0b-9fa4fa2867c1.roa (raw, json)
Hash identifier: 6UEeyJd1ipPDT6uxGEEB/4doznwlmOoOcdygL7LaUkc=
Subject key identifier: 2D:33:98:4B:23:CD:BA:23:95:DC:CB:0B:F7:76:96:44:75:38:86:1A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1EFEA3787A9AB925C0EA1980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b19af8de-8291-3bda-8d0b-9fa4fa2867c1.roa
Signing time: Fri 03 Jun 2022 20:03:08 +0000
ROA not before: Fri 03 Jun 2022 20:03:08 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 156.5.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:fe:a3:78:7a:9a:b9:25:c0:ea:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 3 20:03:08 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=bce1503f-18e2-470c-abb7-8bf19165a159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:95:35:04:ac:2f:28:17:3e:1e:ab:2a:b0:
2e:83:32:71:39:b1:c3:3e:c6:d5:04:a5:3e:73:56:
26:d0:5d:2f:3e:1c:d8:38:1a:fe:e3:f2:0c:a2:86:
ff:04:4f:17:0d:e0:a0:f4:79:36:db:6f:eb:e2:d6:
b9:54:a5:b1:89:32:16:3d:05:63:2a:50:40:89:e6:
d5:04:74:18:fa:53:af:8d:1b:a4:12:11:68:7e:81:
7c:24:6e:1b:6a:0b:61:1f:5c:72:18:bd:e9:9e:82:
da:62:42:24:6f:95:92:6c:e7:e5:6f:00:42:15:47:
e3:b7:70:a4:50:c9:3c:dd:85:df:b5:28:05:e8:35:
37:8b:0f:d8:c1:74:d8:7f:98:78:0c:73:d3:59:ad:
93:95:66:c4:e1:e4:87:28:b7:f0:4c:d0:f5:9b:dd:
76:52:8c:b8:e3:a4:19:e7:ac:95:57:65:63:35:ee:
38:1b:b9:48:1c:c3:cc:57:d8:2a:1d:7f:1d:47:04:
f8:19:a8:95:56:e0:f7:a4:98:5d:0c:51:f0:f4:98:
df:ce:74:df:48:f3:41:7c:d6:c6:1e:08:63:2a:29:
20:b4:81:ce:33:6b:0e:e3:e2:23:50:eb:bd:4e:9d:
aa:19:50:f0:1c:df:a5:a1:4a:85:c1:98:14:a5:03:
68:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:33:98:4B:23:CD:BA:23:95:DC:CB:0B:F7:76:96:44:75:38:86:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b19af8de-8291-3bda-8d0b-9fa4fa2867c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
156.5.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:dc:50:98:d1:1d:0d:26:20:5f:05:43:41:54:cf:a5:9f:d3:
cd:32:c1:ee:12:f2:a0:80:7a:6a:94:57:f4:06:04:3a:2f:a5:
33:fa:71:4f:24:bc:d1:83:de:43:2e:c0:3a:e1:18:90:2d:87:
6a:13:06:b9:14:36:45:7a:6f:0f:8f:7d:52:ee:c6:59:e5:23:
8f:30:1d:50:79:a4:4b:a1:6c:e2:46:85:d3:e7:7d:50:0b:a0:
ab:7f:27:d5:f0:11:19:4c:b6:8f:29:d1:dd:d1:ef:9f:f2:ca:
9f:57:9c:bd:32:1d:a7:0d:41:66:14:ff:92:24:ac:ef:d2:76:
a3:5a:2b:f0:e7:31:e7:cb:ff:45:8c:06:63:13:dd:8f:0a:75:
39:8d:f9:27:94:66:40:a8:01:8d:bd:f6:af:4a:f6:c6:05:c0:
25:6c:13:a1:fb:42:57:49:e3:16:a0:eb:93:da:49:2d:c3:0e:
e2:63:f9:5f:b4:1a:69:61:66:fa:df:86:4f:ec:2c:f9:cc:67:
4d:a1:fb:0a:eb:fa:dd:d4:dd:b3:81:07:d0:88:65:3c:b9:fe:
64:fc:68:2f:1c:9c:05:fc:c7:e5:89:d4:a2:75:f6:3d:77:f3:
d9:49:e9:f3:bf:43:0e:70:a5:ad:31:4c:48:62:40:25:76:d1:
e2:c7:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:47 2025 by rpki-client