Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c56125b3-66ca-3808-ae81-15e095003374.roa
File: c56125b3-66ca-3808-ae81-15e095003374.roa (raw, json)
Hash identifier: v6iHwTJW4dGvjvYlGWGM8ULssiv1OVmmX+F6JV0iBIs=
Subject key identifier: DF:86:06:65:D7:AC:E4:32:80:5E:93:67:11:77:CA:DB:17:BC:65:2F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401C148958BCE0C4A5941F2200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c56125b3-66ca-3808-ae81-15e095003374.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 164.195.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:14:89:58:bc:e0:c4:a5:94:1f:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=5561ae59-f1e7-4e00-b5c5-34ff6db3e57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:cf:2c:d9:60:71:7e:c1:58:13:19:4c:6c:
e5:35:9a:24:a3:53:96:fe:e2:f7:c7:18:a8:b8:44:
60:82:77:49:3c:e4:49:52:d9:12:8e:0f:ff:e4:d5:
36:2e:b3:ef:ef:bb:5b:d9:99:23:b8:12:bc:d4:d3:
76:b8:92:58:a1:99:b9:f5:61:54:43:db:b6:c4:6e:
c0:df:cc:59:01:6f:44:86:bf:c0:6d:0e:ea:ee:14:
ac:d7:01:b9:3e:0c:f5:37:35:61:ea:1d:b7:6b:5b:
79:f7:dc:36:1b:77:2d:36:ea:2e:4f:de:27:d6:8a:
40:8d:47:dc:e5:55:00:4e:3e:1f:35:8f:a3:7a:c6:
43:db:06:20:09:78:c4:0e:f0:48:1c:48:c2:ed:5e:
2e:51:dc:48:14:81:bc:9b:34:6e:9b:ae:c8:3c:5c:
41:0a:10:21:cf:06:56:62:b5:e9:0f:17:b1:97:0d:
34:ad:43:b0:2f:14:7f:9d:81:32:40:56:08:6d:e9:
c1:c1:5e:f0:63:5e:97:19:b1:cb:d7:75:27:6d:47:
29:f5:e2:b4:59:10:0d:8c:e0:67:81:5d:29:8c:98:
58:fb:b8:c7:16:f0:c6:19:75:43:5e:92:d1:75:a0:
bd:b9:a4:c0:45:eb:67:5d:c4:e7:95:21:1d:2d:f6:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:86:06:65:D7:AC:E4:32:80:5E:93:67:11:77:CA:DB:17:BC:65:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c56125b3-66ca-3808-ae81-15e095003374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.195.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:45:ee:47:9b:52:a0:7b:71:f7:97:e4:77:46:a2:b0:de:6c:
58:a2:45:73:2f:47:3e:30:e0:a8:44:c0:e6:58:74:37:8e:4f:
a4:20:63:03:b9:a3:d9:d4:c8:98:f5:83:7e:cd:02:c1:0e:d2:
63:e9:90:8c:e9:83:0b:82:92:38:02:cf:74:13:af:0e:f2:60:
b2:63:aa:8f:f3:b0:bd:6d:d2:74:77:2d:d2:3a:fd:1b:e9:14:
9b:52:f4:07:da:06:c8:fc:2a:8d:3c:92:3a:14:26:16:f2:82:
15:de:db:dd:5f:fa:74:f2:22:f2:fc:47:73:e2:86:6b:7d:4d:
37:e7:4f:03:76:8b:54:80:42:c7:03:e7:a3:52:e2:84:f0:f7:
e9:b8:7f:6d:3b:08:b8:a8:32:ed:91:a0:b9:e6:52:b2:8c:eb:
21:81:07:a8:99:34:a6:fe:6d:15:0e:4b:a6:68:3c:90:65:62:
62:ed:2c:1c:f1:96:c9:20:92:f4:4e:2a:9d:ae:fa:ad:43:03:
e0:70:cc:cb:0d:75:9a:47:18:b6:12:0e:9d:f7:a5:b5:b5:7a:
0b:89:1b:78:d6:b8:1d:a0:01:5d:08:d0:05:dd:a3:0b:e0:72:
16:c3:aa:43:b5:24:ce:a6:4a:cd:c5:4f:fe:55:5c:ea:c5:5c:
ae:b2:2e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:39 2025 by rpki-client