Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c63389df-22e5-3a16-980c-c5ba02318995.roa
File: c63389df-22e5-3a16-980c-c5ba02318995.roa (raw, json)
Hash identifier: ABaRK/2UH2uFA8jNHNVeKbraa+lpwgOuSuG1mcRhj+k=
Subject key identifier: 25:BD:55:94:93:D1:3C:49:1E:23:99:87:60:C5:D6:D9:FD:E5:39:FB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A9664271FCE69C50FC86F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c63389df-22e5-3a16-980c-c5ba02318995.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 162.85.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:96:64:27:1f:ce:69:c5:0f:c8:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=31bbcb0e-38d5-4db9-b06d-52be5b04cba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:be:c7:37:a1:61:09:df:c2:2b:3d:50:b8:
e0:59:11:2c:6b:df:8d:69:6b:17:ee:d1:55:2f:1c:
14:f5:23:77:38:7d:ad:91:71:29:f4:33:dd:e9:9a:
f1:62:24:2a:35:ac:fb:60:ae:8b:89:59:8b:82:3d:
ff:8e:b0:8e:d9:91:b8:78:8e:f6:6e:85:f8:79:d3:
50:cd:de:2f:f1:8b:3e:da:f7:83:6e:3e:a6:3f:87:
e8:eb:5a:df:0a:8b:72:6d:2c:1a:b2:1b:dc:5c:51:
6f:1a:3c:50:61:58:b5:9b:40:68:76:2f:09:7b:bc:
6c:19:4c:52:27:65:af:e7:c8:96:50:9a:10:7d:6c:
47:6b:c4:16:79:20:73:a9:ee:d2:af:69:df:c5:2a:
86:0d:66:cf:21:c5:36:3f:88:99:b4:e3:13:56:ca:
4a:78:10:d2:d1:cd:bf:61:cc:8f:94:8b:23:21:b9:
3d:98:2f:cc:06:6b:cf:4b:4c:c7:7d:f6:f9:95:a9:
0f:f2:b1:15:67:81:92:8f:a7:96:b7:61:9f:cf:bd:
74:0f:29:c2:71:26:a5:7e:2c:38:ba:f0:fd:ba:85:
89:62:c7:54:66:19:4e:8b:f3:62:ec:72:65:6a:44:
da:66:79:ce:43:e1:cc:19:28:69:65:e4:9b:ed:3a:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BD:55:94:93:D1:3C:49:1E:23:99:87:60:C5:D6:D9:FD:E5:39:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c63389df-22e5-3a16-980c-c5ba02318995.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:f4:56:16:83:25:bb:e5:9a:9c:ea:e1:0e:64:26:a4:ed:c4:
3d:77:f9:0a:ea:92:8a:61:5d:cd:95:b4:61:86:5c:0e:a2:a6:
1f:2b:a2:9a:5a:95:e1:fb:7e:15:61:9a:f7:4e:09:4b:5a:23:
3c:fa:ec:8a:aa:e3:3d:8e:fb:ab:ef:39:1c:32:3b:28:bc:75:
9f:cf:8d:38:8a:ed:f2:58:c1:fb:5b:69:8b:c7:88:9d:a3:d2:
46:42:72:7f:cf:ce:5a:bc:c8:11:5d:46:d4:64:ca:3d:ee:78:
c7:33:5d:87:78:1e:67:1d:0c:d8:b5:76:72:14:f7:9e:97:cc:
b6:69:9b:80:82:a5:c5:52:5b:99:f9:77:28:33:a2:54:0a:02:
a6:05:1f:e8:5a:c6:d6:a8:87:6d:fa:90:a6:74:c6:7b:d9:0c:
5e:4a:5b:38:46:63:f0:2d:5f:0e:88:b0:ec:41:c2:d9:7e:95:
ff:82:a8:2e:62:68:48:94:44:45:a2:0e:0f:19:03:6f:e5:99:
a3:e4:c3:1c:39:92:a0:4c:80:12:d4:70:e4:09:ae:60:b2:c1:
f4:82:ef:4a:97:43:84:8c:e0:69:4f:87:7f:59:0f:32:df:ec:
dd:a0:f9:dd:5f:06:83:8d:55:5c:75:4b:54:a9:e5:cf:7f:a4:
88:fa:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:25 2025 by rpki-client