Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfbb9baf-58d3-3ca7-bbd3-5592359037d5.roa
File: bfbb9baf-58d3-3ca7-bbd3-5592359037d5.roa (raw, json)
Hash identifier: xxb8NR+myYavmi/5Exswf3ZOOfbeUkbh//14z3o7eLE=
Subject key identifier: B3:1A:E7:19:B2:D8:DD:9A:C7:B4:79:D9:DF:35:F7:83:90:04:C1:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406FDC2763BBB16BBD5B82B800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfbb9baf-58d3-3ca7-bbd3-5592359037d5.roa
Signing time: Sun 01 Jan 2023 12:00:00 +0000
ROA not before: Sun 01 Jan 2023 12:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6f:dc:27:63:bb:b1:6b:bd:5b:82:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 1 12:00:00 2023 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=97b15353-fedb-4d64-b0c0-a77b654b74fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:82:2d:00:db:ef:ce:b4:62:e8:7a:1a:cc:
4a:01:4b:95:e1:f9:64:73:26:af:5e:11:b2:57:0a:
27:48:80:69:4d:8b:d5:75:68:ff:b9:25:a1:22:dc:
60:5f:18:78:00:e7:6f:a9:35:72:88:dd:9b:dd:dc:
91:53:d7:a4:d9:8f:05:a3:fe:d5:6d:a9:8a:0d:1a:
50:36:f8:d2:ef:8e:05:92:cd:29:4c:fd:37:3d:5c:
49:8a:9a:0b:40:5d:38:8a:2c:ec:3d:84:c0:63:d8:
62:4e:4f:de:6a:90:b9:90:22:22:19:62:72:d1:ab:
fa:e2:61:98:4a:ec:a8:55:f6:85:52:30:f5:76:dc:
47:a1:13:b3:a8:1d:ab:e3:70:33:65:08:8e:a7:dd:
0f:af:bd:45:b4:45:a4:b0:23:f2:08:2d:bc:23:bb:
d1:7a:c1:3b:f1:80:02:ce:75:85:14:6c:4b:08:83:
de:84:d0:01:b0:98:18:5b:46:a8:1e:2b:ac:b3:06:
6b:27:92:0b:78:a7:b7:d2:03:02:7c:3e:08:6d:3b:
d6:97:6c:31:7c:f8:99:5b:2f:1a:17:98:a0:4e:9e:
da:5a:b8:3a:ed:f2:d1:75:d8:de:11:05:57:f3:ad:
3c:9c:3f:dc:6f:8c:be:5b:2c:78:09:25:99:f9:95:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:E7:19:B2:D8:DD:9A:C7:B4:79:D9:DF:35:F7:83:90:04:C1:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfbb9baf-58d3-3ca7-bbd3-5592359037d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:36:34:9d:8d:56:ed:3b:28:b6:29:6d:bc:7a:23:f8:54:d3:
fb:bd:eb:34:0e:c4:77:e6:51:3e:3e:85:56:7e:c4:a7:c1:fc:
96:fd:03:51:4e:11:18:cc:a7:23:30:b5:f2:3f:d7:bf:75:57:
4b:3b:2b:91:96:20:ee:4d:f9:9b:f9:df:e6:00:df:4a:82:36:
bd:0f:6b:07:13:54:5f:05:0d:1f:33:03:69:75:51:58:72:a6:
77:e2:e2:cc:3b:23:aa:04:c1:a3:2a:56:aa:b6:d0:97:8c:5e:
ff:c2:64:8f:86:4f:c1:67:35:f6:db:05:52:43:39:bb:ce:1e:
57:d5:df:73:9b:ff:9e:06:28:eb:3f:e7:ab:e7:f2:fd:20:b9:
68:02:c0:6d:1c:5c:a2:a5:0a:2c:c0:fa:6e:22:17:a4:8f:3b:
36:ce:c1:dc:f8:72:58:6a:d6:e8:dd:51:35:39:8e:ca:77:05:
db:78:eb:6c:2c:a8:a5:16:76:d5:36:20:7a:20:19:c7:55:6a:
f2:39:39:8f:e7:57:bc:48:8e:ba:b3:7d:13:7f:5a:15:61:b7:
a3:aa:cc:e5:d4:fd:d3:7b:7e:d9:6c:bd:ab:74:d3:ca:c8:c7:
3d:d5:24:5f:16:5d:9c:ae:ca:fc:8a:9a:37:a4:3b:ca:7d:9d:
5d:c0:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:21 2025 by rpki-client