Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b38ad318-9a71-3ea8-98a8-dad7436556ca.roa
File: b38ad318-9a71-3ea8-98a8-dad7436556ca.roa (raw, json)
Hash identifier: qS+wMrT0sBnTTsRBo2v/pSeMwh1sh7oJrRn1+vRUhXk=
Subject key identifier: 8D:E9:D6:5E:AC:5E:57:14:40:77:99:9C:60:23:A0:9C:EA:DB:10:50
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2A0D6998C4E4A7A7EECCD880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b38ad318-9a71-3ea8-98a8-dad7436556ca.roa
Signing time: Tue 08 Mar 2022 05:00:00 +0000
ROA not before: Tue 08 Mar 2022 05:00:00 +0000
ROA not after: Tue 12 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 162.208.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2a:0d:69:98:c4:e4:a7:a7:ee:cc:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 8 05:00:00 2022 GMT
Not After : Apr 12 04:00:00 2022 GMT
Subject: CN=a773d174-42df-41fd-ab61-7fd77c7bf9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:83:aa:b1:07:ca:ce:a0:49:ff:6c:1e:7f:
57:b0:44:68:9d:04:a3:fd:dd:bc:1e:66:cb:e4:7c:
c9:9a:12:3a:98:da:b0:3f:7b:af:61:f1:02:40:ef:
e3:11:d8:80:24:d8:95:7f:b7:e7:f9:42:b8:1d:a5:
5d:90:1d:73:31:57:8d:fe:bd:75:51:4f:01:88:b8:
18:de:a8:b3:6f:da:b8:a3:32:64:08:40:89:02:06:
c7:90:a9:6d:30:cd:a2:b3:7a:6a:6f:ea:14:22:33:
a3:00:ed:79:45:3f:37:f0:fd:c4:44:57:9e:c4:fa:
0b:00:c1:5a:5d:5e:c5:f4:91:85:02:e8:ce:c8:df:
09:58:81:31:d6:67:3b:2b:63:dd:d2:af:6f:35:00:
26:77:1a:e3:97:5c:11:78:69:6d:4c:24:22:8d:96:
81:6e:96:82:15:04:a4:91:0e:d4:53:7e:55:ed:ef:
9e:37:90:cd:37:0a:17:a6:20:7d:8f:4f:fd:f6:fe:
f9:1a:50:80:e5:16:5f:ab:a3:20:18:17:26:fc:21:
15:de:4e:9b:aa:d7:c1:3f:fa:ab:99:dd:3b:ed:d1:
42:ee:41:4f:24:c2:55:8d:3b:70:40:06:96:9a:f4:
3f:d5:0e:71:8e:b3:f6:8a:73:41:9e:96:1a:51:1d:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:D6:5E:AC:5E:57:14:40:77:99:9C:60:23:A0:9C:EA:DB:10:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b38ad318-9a71-3ea8-98a8-dad7436556ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.208.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:72:12:23:8b:2f:ca:a2:aa:f7:50:f4:84:75:62:17:6e:04:
be:77:d4:bd:57:f7:9a:ba:23:99:02:97:d2:d1:61:b7:ff:aa:
c1:12:80:b5:38:cd:09:b9:9d:56:f7:51:0a:ed:44:21:c8:d4:
28:d0:71:67:e7:48:1a:e0:a8:74:b1:73:40:2a:91:9d:a2:af:
b6:31:65:9f:94:30:fc:28:bd:1a:6d:ba:a7:64:9e:aa:14:ac:
bb:a0:db:dc:f0:ec:0d:17:b8:a4:e1:21:1a:bb:95:d3:38:a6:
ac:20:23:e3:e1:8f:7e:43:d9:02:a2:6b:1a:1f:9a:1c:61:ff:
8b:76:d5:85:aa:22:ba:10:e3:e6:b1:35:f3:63:3f:a3:79:04:
fb:9c:ac:d1:c9:34:82:4e:3a:8f:de:94:d1:95:b1:1f:97:b7:
f1:7f:15:d4:2b:e0:bc:f1:e7:6d:94:d0:10:a8:e5:e1:42:0d:
d9:b7:b9:79:f5:c3:07:65:a0:6e:3e:6b:86:ab:7d:a5:11:d5:
50:9c:71:20:dc:c7:9f:6e:61:a0:a8:20:94:3e:ef:00:81:c5:
a1:c7:0e:06:6d:bb:a1:57:2a:f3:a0:70:6d:4d:34:1c:37:52:
bd:db:22:4a:4a:98:40:b8:e8:03:ca:c5:c0:1c:f0:3f:5d:e0:
ec:be:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:13 2025 by rpki-client