Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7d48ae-0257-3205-9ce8-89aa013ebd0b.roa
File: bf7d48ae-0257-3205-9ce8-89aa013ebd0b.roa (raw, json)
Hash identifier: BVMs5Hk2b+JId68q+GICvIaS4gi8kjiEg4vE8zT/Mcw=
Subject key identifier: EB:88:49:DF:65:21:C5:3C:F8:DC:96:1D:A8:42:CB:79:8A:3B:86:A0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C972A289A5C60C03ED507A800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7d48ae-0257-3205-9ce8-89aa013ebd0b.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 138.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:2a:28:9a:5c:60:c0:3e:d5:07:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=854f9948-9191-473c-b4c2-9b387fcf2e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:8e:a2:89:3f:37:a6:82:36:aa:c4:2e:8c:
bb:ac:cb:43:45:b4:0b:5d:7e:a3:52:fb:e6:92:ca:
36:cf:da:98:d8:e3:c1:7c:cf:d0:cd:40:f9:93:2a:
0b:0b:b4:19:68:35:0b:32:07:8a:5a:c5:c6:b9:21:
c3:80:63:a6:d7:3e:ec:0d:12:98:26:eb:de:e4:c0:
17:14:4f:fb:25:cf:b8:3a:96:04:29:0f:54:04:3a:
87:04:c0:ff:69:ec:70:86:ed:ef:37:af:e0:04:68:
60:5d:13:35:bc:28:59:ec:93:54:17:ef:6b:35:d2:
e5:01:b9:5b:ef:20:28:70:cc:6f:a4:b8:bd:d4:be:
38:f2:6b:bc:c3:09:d8:41:ef:1a:53:a4:13:a7:d0:
2e:74:cf:c3:62:7e:2c:98:55:55:b2:b1:29:fe:51:
1c:5d:ef:52:d9:2e:98:c4:5a:f9:67:9f:fc:32:54:
b4:77:fd:fc:3c:69:66:90:b2:6f:e8:db:f5:ab:ad:
bb:a5:3d:73:ce:08:58:5f:5b:d5:01:f7:2e:ff:4c:
44:0f:6d:34:a3:06:28:a4:25:13:d2:93:98:e5:94:
d7:bf:cf:b1:6f:22:0a:3f:45:38:0d:c7:32:6b:31:
65:3b:c3:80:cf:b6:4c:63:5c:d6:45:44:04:02:71:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:88:49:DF:65:21:C5:3C:F8:DC:96:1D:A8:42:CB:79:8A:3B:86:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7d48ae-0257-3205-9ce8-89aa013ebd0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:a2:a6:4b:46:ed:e0:24:2b:65:5e:cd:e0:2d:5d:7c:6f:f6:
ce:ef:b7:e8:79:96:27:77:b3:b6:1f:40:d8:48:2a:27:61:34:
9a:47:40:c0:d1:9f:90:d5:9e:bc:98:1f:3a:35:c4:d6:6a:c7:
34:d6:d9:75:9e:85:b9:38:fb:05:46:d2:d9:71:0d:cb:da:78:
38:04:35:e4:3f:6f:eb:8a:91:5d:28:97:27:1c:4b:08:14:38:
de:22:c4:5d:ee:9f:06:b3:9a:a8:1a:76:a6:76:5c:d6:33:c9:
0a:05:65:3d:a9:f6:ec:f1:b8:d5:9b:56:bb:a2:55:af:86:5e:
28:5f:6d:b5:ed:1d:18:73:66:4e:cc:ca:9b:09:4c:c3:75:52:
27:bc:d4:02:ac:4e:5b:6b:14:7f:be:f8:1d:d5:90:81:60:4f:
7e:2f:80:73:eb:b3:87:7a:81:b3:cd:44:97:63:da:a5:a6:39:
b0:34:ea:09:89:43:c4:98:ca:15:3f:02:4f:0c:b5:09:ac:ff:
dc:c2:a3:3e:5d:1a:b0:8e:32:dc:c6:2b:91:a3:8e:98:b0:e5:
9c:4b:48:f5:13:63:7f:67:71:00:7e:31:18:5f:f1:3d:e2:0a:
39:a5:e0:44:33:86:37:58:0d:77:73:76:85:2a:00:b8:6a:05:
56:28:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:26 2025 by rpki-client