Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca580e36-f0e7-3dd8-9272-9d8875da4bcc.roa
File: ca580e36-f0e7-3dd8-9272-9d8875da4bcc.roa (raw, json)
Hash identifier: Ad7zyh+gKlmdlEhESZlhcEZf4RQxANWR65DH7V5O3CM=
Subject key identifier: 4D:F2:30:E2:16:83:71:D5:1A:84:5C:72:7C:28:C4:B2:50:48:90:F9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5A84FBA6FCFCBF8B7F4CEDC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca580e36-f0e7-3dd8-9272-9d8875da4bcc.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 162.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:84:fb:a6:fc:fc:bf:8b:7f:4c:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=32f2b992-de92-4604-878c-40efb1806f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:03:17:e9:52:02:39:e7:02:7f:a3:fe:28:
91:1d:ad:97:2e:07:0e:69:cf:31:68:19:da:78:f0:
80:7a:aa:00:fe:64:96:bc:e6:1c:c6:4e:4e:66:61:
9a:9b:a1:05:42:f0:7b:4b:a3:1d:85:25:9e:5e:47:
60:03:07:24:79:df:ef:a8:df:34:3d:03:56:04:da:
1b:1d:09:26:4a:e2:51:d6:72:b0:c4:1c:20:9f:53:
a7:38:5e:9b:b1:83:65:93:05:fc:58:0c:f2:c9:d6:
34:c1:f4:69:19:76:e5:55:ca:0a:4b:8e:12:68:08:
d5:45:aa:80:e2:e3:50:e8:f9:6f:de:c3:6d:28:62:
a8:71:e2:4f:dd:1d:58:83:39:4d:40:7a:1a:ee:0b:
da:7d:22:1b:9e:25:95:31:aa:69:63:2e:c4:43:09:
5c:20:d5:62:75:46:8a:44:90:ee:0d:3d:d8:ed:10:
a0:18:cf:77:75:54:da:4d:71:4f:08:47:b9:fe:b2:
95:fa:e3:68:4b:05:74:19:e3:7f:23:c0:32:d6:8f:
2f:83:0b:98:79:47:88:c8:b2:aa:35:a3:ac:e1:4a:
b3:e6:74:36:14:8a:0a:ee:1b:e3:81:c8:45:40:c8:
b8:9d:30:38:6b:ec:a7:cc:ea:b5:18:55:f6:cf:6c:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F2:30:E2:16:83:71:D5:1A:84:5C:72:7C:28:C4:B2:50:48:90:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca580e36-f0e7-3dd8-9272-9d8875da4bcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:66:97:85:82:43:8d:1a:fa:e4:6a:de:b5:5e:c0:00:d6:84:
2c:35:fc:70:a6:0f:86:4d:6b:fd:c5:3b:5b:9b:84:b5:4e:94:
32:48:ad:79:6c:c5:f8:8f:a4:7a:78:db:85:73:6f:c4:f9:5a:
90:09:6d:fd:1d:90:aa:28:d8:ea:e8:fd:dc:2b:eb:fd:f8:40:
91:3b:ba:4e:6c:4a:62:00:8c:bb:0e:f2:b1:fb:b3:c4:a3:a9:
99:81:7f:35:c6:82:0d:ac:09:f4:fc:dd:80:06:31:12:9b:6c:
a8:82:71:ce:6e:87:5d:fb:4e:7a:61:45:9e:ea:58:e1:00:ad:
4e:64:7c:79:5b:85:f1:93:71:db:04:55:a0:11:a5:55:4d:53:
2b:29:aa:4e:65:64:23:e8:6a:2b:89:e0:54:c1:2d:90:c7:59:
d3:c6:9a:38:d8:62:62:0a:cb:6c:0c:09:34:21:7c:ea:16:e9:
a0:58:9f:3d:dc:23:41:5f:06:d6:c9:2e:12:2f:3d:88:db:cf:
cd:df:97:90:03:81:78:5c:bf:d4:82:b2:f2:ac:25:16:de:09:
d3:a6:80:43:31:55:e9:bc:e9:f3:5d:c6:65:c6:55:3c:67:b2:
c5:88:c0:41:c9:89:a5:32:a0:30:6f:65:1b:a7:2d:c8:0b:d1:
43:5d:76:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:02 2025 by rpki-client