Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/beb4ce3b-2075-3a44-be59-028929091527.roa
File: beb4ce3b-2075-3a44-be59-028929091527.roa (raw, json)
Hash identifier: c9bEBgeFpz6A6emoXYSrYJnwMHvYsM0jzG5/cSvkA5Q=
Subject key identifier: 47:B9:5F:87:2D:CE:07:D0:67:02:D0:0B:80:48:18:16:65:BC:7D:95
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBAA9C9B80146F0B709DFB3F8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/beb4ce3b-2075-3a44-be59-028929091527.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 156.4.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ba:a9:c9:b8:01:46:f0:b7:09:df:b3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=248aeb72-81a2-4bed-a382-67cedeb4dcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:1d:c5:ad:a7:ac:79:97:67:b9:82:1e:f5:
a7:5a:51:38:d1:3f:82:3a:6d:4e:d5:4a:eb:40:e5:
a8:f4:22:c1:cf:75:12:ce:5e:fd:8c:ec:47:0f:89:
68:1b:3f:bd:0f:af:34:38:c6:fa:a3:38:8c:1d:3d:
0d:e8:73:b8:23:ea:55:7d:c7:9a:54:b7:9d:c3:30:
cb:94:6d:1e:14:d3:02:60:fc:64:ef:7e:57:7a:78:
ef:9f:6a:bf:5c:16:0d:d6:b4:36:c5:07:7c:52:cf:
83:7e:1c:01:7a:31:09:41:d0:d2:0d:d3:28:1c:7d:
8f:40:1e:95:72:8a:8f:81:b6:e7:16:5c:30:39:95:
ae:95:c8:09:ad:be:7d:98:aa:4a:01:15:bb:48:dc:
1d:1a:01:0c:b1:4e:c5:f4:01:24:a5:e0:6e:07:d6:
94:8a:82:46:74:51:b9:66:3f:1f:7e:fd:4a:6b:c7:
0c:51:e8:2f:4e:c6:ad:7e:a9:56:77:d8:b0:ae:dd:
a3:05:d3:b0:c1:41:65:f2:df:18:69:73:0d:8e:9d:
c9:08:84:1b:91:99:e1:a4:b3:b6:b9:ee:95:c4:26:
f4:10:a3:88:95:9a:55:87:f4:10:b6:e6:0f:a1:4e:
35:6e:d5:0f:28:1c:93:6f:59:19:d5:50:1a:90:1a:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:5F:87:2D:CE:07:D0:67:02:D0:0B:80:48:18:16:65:BC:7D:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/beb4ce3b-2075-3a44-be59-028929091527.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
156.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:c1:66:50:c8:33:93:1c:3b:83:1e:7a:17:b0:0d:bb:70:e3:
32:71:bf:cb:28:09:38:57:b8:41:73:90:90:62:9d:4b:b1:a9:
84:2d:0c:ab:22:ff:77:6b:41:3b:11:d8:f8:38:31:83:be:fb:
13:5f:bc:9d:36:ae:11:fa:a3:d1:40:a6:9b:89:3f:8b:59:18:
4b:90:e5:ff:5c:90:ef:69:78:3e:84:98:d0:f5:a6:5e:33:f5:
c9:1e:10:9b:42:d4:19:43:de:8c:7e:c2:12:11:0b:ac:52:0b:
65:cb:64:07:9e:dc:a7:5e:3d:aa:7f:94:aa:f3:c7:0a:a3:76:
00:63:d4:aa:cf:06:02:a2:d6:7f:b4:f3:d4:37:64:82:05:d0:
9e:62:c3:15:c7:70:45:0e:75:a2:0d:d7:c4:8c:db:d0:80:8f:
8d:f8:de:15:16:da:5b:b3:d3:00:bb:94:39:50:fc:72:d9:cc:
70:d4:cc:6b:21:c1:eb:fb:64:11:39:c3:f5:26:29:cd:27:49:
4f:a1:9e:17:4c:42:52:2a:8d:57:5b:36:e4:7a:67:12:38:20:
4c:ee:e4:37:7b:85:69:34:51:2f:ab:f7:c0:5a:70:f4:86:e1:
b1:42:e3:b4:a4:a6:12:75:a4:32:e9:92:55:e1:50:af:74:dd:
30:48:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:08 2025 by rpki-client