Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1068c04-2930-3263-ac76-f35a06dfa7ce.roa
File: c1068c04-2930-3263-ac76-f35a06dfa7ce.roa (raw, json)
Hash identifier: caG9kxLCtwblmvK1iAbgT4qTdTT2L9PqQh+Q5qEyqts=
Subject key identifier: 9A:42:35:B7:E1:46:3F:27:B4:32:3E:CF:21:26:E2:FC:99:92:63:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBF4990F2D555A9E597FE3F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1068c04-2930-3263-ac76-f35a06dfa7ce.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 138.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bf:49:90:f2:d5:55:a9:e5:97:fe:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=4e1c7604-d006-4d99-b01c-737faada3624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ed:4c:88:b1:1c:98:19:54:ae:b5:57:76:91:
da:e0:a9:6d:81:fd:95:25:ab:0a:32:15:ff:95:f5:
43:03:0b:d2:df:b3:9a:e3:b6:05:7d:10:47:bf:7a:
3b:92:73:86:48:8c:b2:d3:54:ba:36:2c:41:d9:2d:
16:61:e4:1f:40:b4:49:80:53:68:00:58:2a:82:40:
95:b3:91:8d:94:01:ce:1e:91:65:c1:47:08:46:59:
02:15:05:1e:c4:66:45:4d:24:f2:1e:ad:eb:1e:e7:
25:fe:61:cf:c2:b1:05:c1:8a:74:53:5a:e9:87:e4:
9b:21:89:bb:c5:b8:3e:3c:20:20:aa:26:cb:ae:28:
82:ee:8b:a6:cc:9a:10:ea:9f:f0:4f:88:55:c9:a4:
dc:81:79:fc:33:09:11:61:57:0c:ce:cd:48:6e:0b:
98:76:50:67:0c:4f:64:48:83:83:a4:99:e5:ee:36:
bf:27:f2:fd:bb:3c:4e:0d:a4:35:e9:52:fc:6e:04:
c1:84:88:af:97:9e:b6:cd:ef:90:2a:b4:cf:69:18:
8b:eb:0c:d1:b5:5d:3b:20:9d:dc:94:be:86:5f:18:
92:b1:7f:ad:bb:69:73:cc:63:ec:d5:89:a3:ef:50:
a2:bb:5c:a9:76:02:5a:a7:1c:a8:f8:40:ae:c0:01:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:35:B7:E1:46:3F:27:B4:32:3E:CF:21:26:E2:FC:99:92:63:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c1068c04-2930-3263-ac76-f35a06dfa7ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:00:cd:0d:3c:b3:32:90:06:55:32:a3:15:d4:76:57:22:5d:
4a:2c:21:d7:86:de:c1:a7:39:66:a7:4c:ad:87:47:45:e4:63:
74:96:e7:50:d3:a6:be:a3:86:cc:34:b4:b3:39:0d:c5:df:76:
ca:70:e4:1c:45:88:b2:d6:07:a0:ff:2a:e7:57:0b:27:01:c1:
11:c4:75:7d:d6:d9:08:24:2d:10:da:f3:e0:fd:16:2a:0d:0b:
55:38:62:10:9d:6e:12:d4:e0:a2:6e:84:62:7a:91:dd:22:f7:
29:c7:64:67:62:14:a8:27:6e:05:78:6c:52:5d:8a:4f:c5:1f:
4b:40:45:ce:3e:49:07:8b:73:8b:af:bc:93:bf:98:b3:ac:43:
17:55:98:08:84:91:1c:41:1b:d5:6c:b3:05:8d:55:d8:dd:69:
b5:10:ba:8c:40:cc:03:f4:15:68:54:38:91:2b:d2:8f:c8:91:
65:7c:9c:0e:a0:e3:83:72:13:bc:d1:fc:ed:54:9f:41:0e:68:
0a:73:3d:26:11:cc:7c:2d:dc:bc:ac:a2:ba:b9:81:e0:fe:cb:
8a:5e:55:91:b6:4e:54:5a:aa:38:83:9a:0e:07:16:ea:ea:fe:
7a:a2:32:c5:85:22:80:78:4a:f1:e9:d5:a8:8a:04:17:6a:d0:
e4:ee:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:14 2025 by rpki-client