Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd4f6f25-d9b4-3564-b21b-ec53f527e912.roa
File: bd4f6f25-d9b4-3564-b21b-ec53f527e912.roa (raw, json)
Hash identifier: ia2t+qeVRgt9eu2Vjm/08Q9B4qtS3yOkE8NOzqgrbJ0=
Subject key identifier: 88:C5:4D:29:71:72:34:CB:CD:5C:D9:C7:6F:14:87:34:70:8E:73:9D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E5621C2E5937FB2DC8C4A5C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd4f6f25-d9b4-3564-b21b-ec53f527e912.roa
Signing time: Wed 22 Jun 2022 19:27:07 +0000
ROA not before: Wed 22 Jun 2022 19:27:07 +0000
ROA not after: Thu 28 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:56:21:c2:e5:93:7f:b2:dc:8c:4a:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 22 19:27:07 2022 GMT
Not After : Jul 28 04:00:00 2022 GMT
Subject: CN=8acb3903-e8b3-4bb0-ab05-cd989473359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:31:08:ab:3e:1c:21:82:f4:7f:1c:81:72:
da:5f:74:d3:95:4d:2c:58:18:99:6b:38:c1:60:da:
1d:37:5f:1c:a2:dc:32:43:ca:06:8a:6c:9e:89:c8:
51:5a:3f:e0:d2:93:7a:98:70:ee:5b:11:25:0a:a2:
a9:f9:df:24:83:fd:2f:6c:26:46:89:db:3e:7f:4c:
f3:4a:9e:dd:14:e2:9d:1b:c0:8b:a1:f5:be:1a:d2:
98:b1:97:e5:eb:b5:c1:4e:ee:4e:db:4f:1e:2e:0d:
a2:a1:31:ad:05:45:91:ba:a3:f8:19:11:af:62:8b:
3d:8b:8b:f7:a3:2c:0c:78:61:7e:f1:20:24:11:84:
c1:9b:91:aa:a0:99:36:a6:3c:94:de:52:00:f7:6f:
2a:09:cc:0e:99:f0:a5:3e:0d:1c:a1:d5:d5:3c:a4:
be:2a:5e:6f:a1:f9:de:e0:82:dd:59:a4:ed:39:d6:
8b:f6:8a:19:fc:de:a1:99:13:ac:fc:47:d7:e5:f7:
fd:93:d4:17:18:cd:32:2e:5c:83:ab:c5:a9:31:78:
4b:b3:f5:f6:0a:82:1b:56:ab:73:17:d6:a0:40:9e:
df:aa:5e:0b:9b:59:31:d0:1b:f3:f4:2e:6c:84:6f:
dd:93:b3:64:c1:54:66:bf:3f:c2:20:34:e7:c2:8b:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C5:4D:29:71:72:34:CB:CD:5C:D9:C7:6F:14:87:34:70:8E:73:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd4f6f25-d9b4-3564-b21b-ec53f527e912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:4e:e8:56:cd:ca:a1:0c:62:0d:51:ab:5e:3c:ab:06:45:1d:
fb:41:5e:6e:37:3e:6c:ed:31:bd:dd:02:19:ce:a5:9a:fb:c1:
7a:f5:86:64:5c:aa:75:8b:5f:bb:ee:9c:2c:3d:28:d0:2a:41:
a6:4c:6c:cd:0b:f1:c3:35:2d:96:f9:00:50:4a:ef:cf:99:71:
0f:bc:8a:9d:16:7d:17:65:62:2b:f1:58:d2:ff:d1:a1:31:6f:
36:11:cd:b4:bd:1e:17:99:23:b9:59:44:20:0e:9d:fd:6b:1d:
86:7d:3b:12:ec:a5:b8:88:36:1d:5d:d6:6c:6c:40:d2:78:10:
5c:54:c8:ac:56:d6:0b:79:8a:e7:b4:79:d2:fa:fd:c3:aa:79:
be:86:12:1e:43:37:4f:91:d2:35:b2:83:fe:25:32:d3:68:ad:
6e:02:df:04:55:d6:e0:f3:a9:4b:18:2d:30:5d:66:32:3d:e8:
9f:32:38:97:9c:4b:cf:39:09:99:f5:1f:bb:a0:66:bb:7b:0d:
e3:0e:08:2c:e7:70:8f:d6:f1:d6:86:08:23:12:0b:50:f5:2e:
02:e0:e9:c8:92:d9:9e:59:a1:8a:71:24:0f:b6:f4:d0:ee:60:
26:da:bb:85:39:fa:5c:2e:23:84:d5:86:4a:63:7a:11:f4:2d:
26:8d:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:50 2025 by rpki-client