Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9c4bd96-bd7c-3ea0-9325-3932aa6db989.roa
File: b9c4bd96-bd7c-3ea0-9325-3932aa6db989.roa (raw, json)
Hash identifier: LtMCi/CyalA+r8StAoB9b+1/WWZNucZc0aeuQ1KV1N8=
Subject key identifier: 59:52:7C:54:12:3E:F4:0D:9D:20:FE:3E:FA:E2:56:D4:1A:F3:D6:29
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404E206863669AAD0057405B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9c4bd96-bd7c-3ea0-9325-3932aa6db989.roa
Signing time: Tue 20 Dec 2022 18:48:09 +0000
ROA not before: Tue 20 Dec 2022 18:48:09 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:20:68:63:66:9a:ad:00:57:40:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 20 18:48:09 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=0632a303-a43e-4455-a3e5-fd0e4574fbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:c7:42:81:f9:72:a1:7c:17:8d:4b:e9:20:
88:e7:84:2f:c9:65:dc:2f:49:65:d3:0a:3c:a7:bc:
35:71:d7:0c:0c:dc:96:37:f6:42:3a:fd:fe:ea:61:
05:07:5b:55:64:3b:86:2a:d5:36:a8:e2:36:96:67:
e6:41:45:61:0e:21:15:69:0c:df:c5:e0:65:c5:d9:
65:44:a1:8f:fc:09:b2:78:35:5d:91:44:58:bc:30:
f7:f3:9d:5b:a4:99:dc:de:57:62:2b:1d:68:59:43:
f7:44:b5:63:2a:93:40:bb:ca:a3:f9:bf:16:32:b0:
6e:83:8a:f5:d8:47:55:f8:b5:9c:36:70:16:5a:d5:
44:bd:67:a9:40:1d:c5:e2:95:da:09:75:cb:16:51:
5f:6d:30:d4:72:98:b3:12:28:35:4b:97:60:fe:19:
49:c9:d4:1f:25:1e:fc:c2:d1:48:8c:65:29:3f:58:
20:e7:e5:1f:ae:31:39:16:d7:a8:fc:9d:c8:b1:ba:
45:c1:b0:54:e9:25:c7:85:13:a6:88:3a:9e:9e:a4:
4e:96:ee:ed:33:97:b4:01:8d:e4:31:df:22:18:21:
d0:f9:c6:3c:c4:3e:1a:6d:3e:81:f9:9f:3b:0f:c3:
48:91:3b:fd:3c:82:c5:3c:24:d2:2b:20:e9:04:14:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:52:7C:54:12:3E:F4:0D:9D:20:FE:3E:FA:E2:56:D4:1A:F3:D6:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9c4bd96-bd7c-3ea0-9325-3932aa6db989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:97:0c:f2:03:63:05:72:a7:84:42:c2:b2:18:56:eb:6f:49:
e9:29:6f:86:a4:3b:a6:65:50:58:e3:8f:70:eb:b8:8f:d3:d3:
62:49:fd:bf:e1:8a:1c:60:ae:bb:8c:60:34:a9:c4:2e:4b:d9:
00:d1:8e:1d:8e:ee:2c:8f:b9:9b:dd:e4:66:07:9a:c8:ea:03:
d2:b5:c8:1b:eb:ed:9b:e1:67:53:a4:3b:67:bf:69:93:79:e6:
cf:92:9f:cc:c8:92:14:e7:5c:9e:d2:1e:65:9a:97:a2:67:21:
85:74:6c:c3:be:76:07:14:b6:b9:fe:be:bf:32:78:59:f0:1c:
73:82:5e:ba:d1:69:1d:b7:7c:1a:cf:c0:66:05:6a:e7:6f:7d:
b8:83:fe:98:2d:c2:ed:d9:d2:0a:f3:10:e9:c3:1a:76:53:98:
46:9a:3e:36:99:ed:32:b5:82:e0:a5:07:12:85:87:fe:76:e2:
54:24:d5:5d:48:b0:44:f4:02:4d:46:04:aa:cb:29:a4:ad:5e:
75:c2:3b:ff:b4:a3:19:02:df:e9:f5:41:04:0e:a7:4e:dc:f4:
a4:7b:69:35:fc:50:8d:6d:cf:f4:a6:7a:2c:79:fe:22:67:45:
bb:e4:1d:44:bd:08:48:8a:6f:2b:f7:e1:a4:f4:36:4c:9b:47:
b8:62:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:19 2025 by rpki-client