Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c43cea8d-c773-3bcd-894c-53306eeae116.roa
File: c43cea8d-c773-3bcd-894c-53306eeae116.roa (raw, json)
Hash identifier: 7/3q87trirgwLsLn3heAljWh1q2pXHrng8A6M8/1j0s=
Subject key identifier: C1:6A:90:15:FF:83:A8:04:86:38:52:80:4C:37:1F:F7:46:98:83:E6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BDE213FABC69ED0E4EB91F17
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c43cea8d-c773-3bcd-894c-53306eeae116.roa
Signing time: Sun 29 Jan 2023 12:00:00 +0000
ROA not before: Sun 29 Jan 2023 12:00:00 +0000
ROA not after: Mon 06 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 143.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bd:e2:13:fa:bc:69:ed:0e:4e:b9:1f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 29 12:00:00 2023 GMT
Not After : Mar 6 05:00:00 2023 GMT
Subject: CN=7dbd63ec-f6b6-4702-ad99-a4e03ad93e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:fd:fd:54:ef:d8:81:6f:31:ed:83:0a:f0:
81:d7:4c:0e:af:80:3a:04:b9:0c:62:64:46:99:34:
a6:b6:df:36:a6:91:fc:45:f4:aa:b9:1a:5e:3a:4f:
c8:5f:c5:bd:22:bf:4c:44:35:fc:3b:29:0b:cf:1e:
98:1d:43:10:39:45:8a:84:ff:be:76:16:c2:cd:d7:
ff:17:31:71:ae:60:94:30:a1:4e:c6:07:3a:ee:11:
77:27:9e:63:6b:c8:6f:18:c2:81:3e:df:af:d4:58:
9a:2a:35:a6:4a:8b:aa:dc:31:60:c0:ff:7f:9b:43:
b1:51:54:9e:9e:d8:e5:85:7e:d6:5b:9c:f5:b8:61:
53:d4:78:97:e5:55:3c:5c:0f:4e:e8:5e:be:f1:98:
cd:e2:7f:4f:72:e5:b2:47:ed:58:85:75:10:43:a3:
5a:81:ff:b3:4e:25:09:dd:d3:f7:50:d3:8f:64:fd:
18:03:f1:7c:10:f7:30:a3:c9:a7:43:f1:7f:f1:d0:
36:51:52:51:93:29:42:5c:59:1e:5d:46:77:cb:6e:
9f:85:20:97:5e:47:98:2f:da:b6:bc:f9:8d:4e:70:
e6:6b:67:b4:bf:ba:81:e4:0f:5e:b9:db:eb:36:ec:
6e:d2:14:ff:1e:05:f2:dc:11:36:df:01:38:c9:92:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:90:15:FF:83:A8:04:86:38:52:80:4C:37:1F:F7:46:98:83:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c43cea8d-c773-3bcd-894c-53306eeae116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:c5:c9:29:6f:f7:6a:cd:2e:09:45:9f:2c:70:0b:f1:89:bd:
f8:75:3c:23:95:50:1c:24:9f:18:bd:5d:a7:b0:25:a8:b0:99:
05:fc:5f:b1:16:b4:85:5d:42:b9:7c:f7:be:e6:d3:52:56:b2:
b9:21:6a:8a:03:4b:dd:10:4b:d7:41:1c:70:94:d8:a0:af:e1:
71:1e:ac:2b:c1:45:61:4f:a2:45:f3:9b:bc:60:78:47:31:86:
48:33:75:db:15:e1:40:fe:39:04:0b:52:4a:7b:be:ac:c6:f2:
93:a4:32:83:fe:e0:9d:3b:ef:12:e1:cd:ae:32:a9:0b:aa:42:
bb:0e:fc:3f:1b:a7:65:84:d8:48:e8:20:40:b8:9e:51:f0:3a:
b1:68:47:b1:77:5d:0e:64:b8:15:23:b3:43:da:9c:35:80:7e:
3e:ae:04:4d:4d:76:7b:0e:01:42:ad:e3:f0:f1:4d:76:3b:a8:
30:35:d1:ca:29:af:d9:0e:6a:24:1d:bf:e2:84:8b:be:2d:3e:
13:55:cd:4d:95:37:55:48:74:11:1a:05:69:e7:b1:f5:a2:7f:
47:b3:52:e8:73:80:d3:c7:c8:eb:ec:48:2f:66:5a:68:b5:d1:
87:cf:a2:20:20:2c:3a:3b:95:de:61:b1:82:18:2a:cb:41:e9:
cf:eb:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:56 2025 by rpki-client