Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2891cf1-5b0a-3466-8ba0-7ba9b37502e0.roa
File: c2891cf1-5b0a-3466-8ba0-7ba9b37502e0.roa (raw, json)
Hash identifier: HH4ZOZoQFM5dKCkSJrX2IH2fcBMl4zCF9vCe86yPtSA=
Subject key identifier: 58:22:CD:85:BB:BA:8D:50:F3:31:22:3E:18:FB:2F:1E:C8:FC:DB:78
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A9DF71C537B3F903295CF20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2891cf1-5b0a-3466-8ba0-7ba9b37502e0.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 162.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:9d:f7:1c:53:7b:3f:90:32:95:cf:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=af4381e2-0b52-4b61-876f-9619c7c026f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:35:bb:a4:24:f6:e3:8b:9d:f4:f7:88:1c:
d6:df:3a:07:71:f3:d6:22:fa:ac:28:a6:6d:eb:89:
0d:98:5d:ed:a2:8d:bd:51:aa:b6:8b:07:ce:b9:2a:
ac:ed:9a:fa:b1:cf:85:7c:bb:f4:cb:03:6e:7b:2c:
43:6d:51:ce:a7:ec:f1:d2:b9:ff:77:b7:18:22:2c:
e0:75:75:0f:37:dd:e7:29:b9:5e:a1:2f:57:27:ac:
a3:32:66:29:d5:b0:e5:a9:98:ff:f1:85:66:0f:af:
f1:5e:11:c6:7b:76:a5:36:71:84:2d:ed:74:ac:d7:
84:25:13:1e:28:99:71:65:2f:b3:c0:ff:6f:78:1c:
48:2b:08:2a:a3:e8:8b:3e:18:41:5d:bc:38:4c:49:
e4:06:54:5f:1f:31:eb:91:b4:79:f3:c6:40:d9:c2:
b5:b7:e0:8b:52:6c:e8:60:fe:45:94:97:f8:b5:28:
06:b3:84:a0:b5:0b:03:78:0d:ba:59:ab:e8:16:59:
f7:b7:9c:26:50:dc:7e:aa:a5:eb:d4:b1:17:4e:31:
bf:f0:a1:99:cd:10:17:0e:57:a0:60:91:26:f3:96:
af:fb:83:c9:45:44:d9:3c:48:0f:08:6f:8d:66:ae:
fc:28:c3:87:13:c4:aa:b6:a6:9d:14:35:23:e2:94:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:22:CD:85:BB:BA:8D:50:F3:31:22:3E:18:FB:2F:1E:C8:FC:DB:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2891cf1-5b0a-3466-8ba0-7ba9b37502e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:36:26:9e:0d:63:62:02:25:0a:45:0c:22:34:d3:ad:18:25:
35:da:b2:4e:04:50:b9:08:cd:e8:42:35:2c:59:d7:de:f6:0d:
2b:1f:44:d8:cb:ba:07:13:c9:8d:1e:e1:19:8d:3b:90:31:df:
46:e5:80:1e:a4:2f:af:9d:14:65:5a:d1:57:7d:4c:66:d5:df:
1e:4c:46:8e:41:be:45:47:75:f8:7e:f7:4b:a6:64:86:96:4d:
a0:ca:dd:05:17:50:78:a5:ec:ad:38:c6:85:7e:00:4a:8d:af:
64:38:a8:0d:29:eb:cf:9d:d5:23:f6:0a:80:40:06:f4:c5:8f:
1f:4f:03:9e:f6:45:36:15:57:ca:e7:6c:86:22:09:75:5d:65:
81:8a:a9:0e:1c:09:88:b3:a5:5d:60:e2:3f:44:99:23:cd:3d:
09:cf:5c:47:51:45:d3:82:2f:96:12:20:76:8c:42:ee:66:f6:
3c:ea:70:9c:bf:41:ed:67:24:97:c0:ce:b0:a0:9f:d9:5c:6d:
28:1f:88:fc:3c:92:52:1d:b7:84:79:20:93:0e:a7:93:7b:cf:
de:51:cc:1d:49:41:78:fd:d5:29:46:97:9a:96:4d:26:6b:29:
c5:3f:9d:e5:4a:70:1a:46:65:a3:4e:28:79:61:e9:ea:25:23:
ad:30:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:36 2025 by rpki-client