Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c80bf1e3-e286-35f3-8529-8256052f249a.roa
File: c80bf1e3-e286-35f3-8529-8256052f249a.roa (raw, json)
Hash identifier: bUWvcI2kzCQNN4gqaw00Jp2HaSP9pLcknksJBSK+074=
Subject key identifier: DC:3E:72:3E:14:12:0C:C2:C1:F8:46:4C:52:DB:A2:C7:68:F9:27:28
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840392C9291D97CCA96378AB580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c80bf1e3-e286-35f3-8529-8256052f249a.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 158.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:39:2c:92:91:d9:7c:ca:96:37:8a:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=dc22f47a-f398-4e5c-a21f-1198a080b486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:95:e3:6c:5f:6e:c8:51:e6:fd:3a:a2:4e:9b:
50:0c:d8:9c:21:6f:f5:bc:7c:36:02:00:b2:c3:99:
18:7b:86:55:8d:f1:f7:25:42:73:54:99:b7:6c:6b:
69:e7:a6:c8:3d:3b:38:3a:23:d3:ea:0a:b3:af:c2:
e8:47:ba:2c:b9:61:26:3b:85:d6:3c:85:d5:88:a4:
c7:50:6b:ec:d6:7d:c3:17:51:c4:ab:29:ba:af:f8:
bb:13:30:b7:86:1b:99:fe:20:73:7b:4b:be:0e:de:
39:fe:f5:74:29:81:0a:52:96:67:16:eb:50:66:44:
bf:77:be:cb:47:41:bb:cc:92:c4:88:26:c9:1b:24:
51:4f:a9:43:59:a0:92:d7:d8:3c:13:df:cc:10:88:
e7:d1:3c:57:cb:cc:76:4a:d9:d6:0a:08:67:22:db:
9e:20:52:0b:5b:8f:54:bb:b1:93:01:0e:c4:02:fe:
66:f6:57:03:34:e2:b0:e9:fb:1a:32:f7:c1:62:c5:
ba:aa:42:4e:83:9a:50:83:d9:83:58:0e:81:8b:ef:
5d:2c:9f:e1:67:53:74:a9:a2:27:9f:bf:75:02:47:
b4:b4:af:18:1c:8a:2b:b9:28:3a:be:8b:10:e6:1d:
4f:df:2f:0f:20:b8:f8:1b:4b:6a:0b:d0:bb:9f:09:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3E:72:3E:14:12:0C:C2:C1:F8:46:4C:52:DB:A2:C7:68:F9:27:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c80bf1e3-e286-35f3-8529-8256052f249a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:0c:08:58:96:ae:c1:31:2a:8c:62:c8:4f:11:4b:b7:14:83:
ab:29:55:c1:da:dc:f2:7a:14:04:b7:7a:f1:5a:1e:94:0f:49:
b9:7b:a0:4e:05:4f:04:ae:96:84:c4:df:31:13:42:7a:a4:65:
18:36:21:95:11:d5:a1:fa:21:31:f6:c9:11:37:43:9f:c1:71:
79:79:03:21:c1:c8:38:5b:e0:24:2b:c8:05:46:a0:06:55:90:
38:69:f8:7b:95:a7:b2:4b:70:fb:61:63:21:5c:fe:c4:3f:64:
56:41:c4:bc:48:14:42:39:4a:1d:41:88:87:42:b0:c4:6b:d3:
d1:bd:e3:01:2f:bc:7c:d8:8e:d4:61:c4:23:56:b7:de:47:9d:
41:8e:c2:67:f4:d3:21:01:cd:b5:cf:3f:f2:fd:87:0a:4a:d9:
cd:cf:3f:09:47:23:0b:8f:e1:32:35:2a:39:5d:33:c7:b4:f2:
ac:3e:a6:bb:5c:91:26:b4:ea:14:39:c9:69:6b:62:9d:f4:7f:
c7:a8:8b:ca:58:7b:dd:40:30:e4:92:ae:da:a2:c8:91:84:40:
a6:9d:ad:d3:91:1e:01:68:97:22:01:9f:3e:64:65:bd:a9:de:
b8:3a:b3:71:ab:30:98:10:bd:3c:7c:5d:91:6a:db:25:2f:74:
32:cf:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:31 2025 by rpki-client