Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b31c711f-122b-3e19-8e18-baa2dc2ebe0b.roa
File: b31c711f-122b-3e19-8e18-baa2dc2ebe0b.roa (raw, json)
Hash identifier: A1X2LceHrsQ3bgZ/7yJNA3t9vXnFXn3mEtcIeHpJu8c=
Subject key identifier: 7D:68:D3:F2:1D:AA:E5:5D:6B:8A:3C:7A:6D:03:CE:A3:80:E7:4F:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE21B92146BC42A62AEE2200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b31c711f-122b-3e19-8e18-baa2dc2ebe0b.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 157.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:21:b9:21:46:bc:42:a6:2a:ee:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=57c44052-a4ae-4385-a0d7-1681d1a1cc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:46:21:a2:5a:96:05:81:51:3e:09:0c:7a:
b2:5e:42:73:34:4d:50:63:3a:b6:bd:2e:8b:cc:b2:
4c:66:51:1c:7d:4a:42:7d:73:d0:54:1f:2c:42:78:
89:46:da:41:3e:a4:d9:df:48:7a:cc:29:7c:41:0d:
5e:78:07:55:24:02:a1:d3:19:21:b3:c6:b4:58:ad:
3f:47:b9:db:7b:8f:87:00:ba:33:16:c8:89:c4:5d:
28:e2:97:c4:b4:8b:33:cc:d2:55:3b:87:50:1d:f6:
60:0c:e5:9d:9d:54:34:90:55:3c:09:85:cc:f1:c4:
96:49:15:49:2d:63:f9:f7:44:9a:96:be:4e:64:47:
b8:37:15:65:53:c0:3a:b1:c5:0c:45:03:f6:05:22:
f7:bc:f0:a5:fd:90:de:75:c5:9d:35:14:05:c0:fb:
9c:bc:8a:11:b6:c2:c8:5a:c2:2c:2d:c3:c4:3c:ff:
5a:70:32:ba:db:3c:23:7a:47:8d:38:64:1c:a8:ce:
51:1e:53:59:1d:93:2a:be:a5:eb:49:b9:9f:18:d4:
80:df:48:55:5f:89:de:ed:05:30:81:03:ba:7e:83:
3b:ce:13:ed:62:26:d1:ce:6d:fa:29:af:e7:14:22:
12:bb:30:32:56:93:ff:30:8a:2e:9d:7b:d4:b1:bc:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:D3:F2:1D:AA:E5:5D:6B:8A:3C:7A:6D:03:CE:A3:80:E7:4F:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b31c711f-122b-3e19-8e18-baa2dc2ebe0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.175.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a1:e9:27:67:56:25:5e:08:80:22:5b:2a:3b:ab:f4:08:02:
e8:30:71:2f:ad:82:d4:27:0e:8b:fb:f3:44:29:19:10:81:db:
da:dc:45:fd:1c:f7:d5:3f:3b:25:90:2a:c8:36:23:ab:49:ac:
eb:f8:29:67:d4:e6:88:29:0c:f2:20:e5:62:d5:cd:40:86:b1:
d6:d7:36:cd:cb:54:96:b7:12:1e:d6:9a:89:28:8a:08:ff:55:
7e:e8:e9:c2:d4:dc:57:7b:ee:df:f8:0c:ed:f3:ab:c0:b3:c7:
3c:66:4e:84:63:1c:c8:ed:33:ff:6a:7d:42:97:1a:2f:f7:17:
29:bd:48:04:b9:65:71:48:35:85:4d:84:36:08:a6:f9:6a:ba:
00:b6:b4:b3:84:78:fe:fe:30:15:ba:40:d5:0f:26:c5:b7:07:
6f:ed:36:6f:cc:18:44:2e:f1:39:cb:26:7c:c3:22:7e:19:ee:
6b:53:83:ed:e7:f3:f8:df:dc:53:2a:69:85:48:cb:cb:8c:c6:
ad:0f:66:73:27:8e:53:45:64:72:13:fc:a7:5c:a9:dd:ab:15:
43:82:08:cf:1e:16:31:db:ba:40:8f:7a:31:d2:e0:1b:9a:63:
6f:b1:cd:37:77:f3:37:ea:d0:c2:d9:06:5d:e8:11:df:f3:91:
81:31:eb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:28:46 2025 by rpki-client