Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc94db07-ccf0-3f29-84f5-546b05f69b2f.roa
File: cc94db07-ccf0-3f29-84f5-546b05f69b2f.roa (raw, json)
Hash identifier: 9cWMfXONRYu5cXqEGE90ACsjhnN7KHLpl3n+iE5jzGE=
Subject key identifier: F4:E4:B5:B1:98:04:5C:8A:7D:66:D7:6B:ED:D6:1E:84:A2:2E:F4:DA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA7DB1F915BB5E47B9A74F100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc94db07-ccf0-3f29-84f5-546b05f69b2f.roa
Signing time: Thu 20 Jan 2022 05:00:00 +0000
ROA not before: Thu 20 Jan 2022 05:00:00 +0000
ROA not after: Thu 24 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a7:db:1f:91:5b:b5:e4:7b:9a:74:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 20 05:00:00 2022 GMT
Not After : Feb 24 05:00:00 2022 GMT
Subject: CN=d98b9597-9aee-405b-8b27-fe9ce258fbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:42:6d:1d:1b:db:57:d6:23:7c:96:98:76:
cc:94:52:48:a8:9a:e8:78:9f:7e:c1:a4:e5:2d:6f:
8f:0f:02:73:41:80:a1:a0:fa:72:03:c6:b9:cb:0f:
29:8f:11:da:82:53:79:00:fe:f4:fe:68:3d:b1:36:
62:f6:bf:29:57:8a:a8:8e:99:19:c9:7c:a9:4d:e3:
b8:02:c5:42:d3:12:b7:07:17:69:3b:ba:57:2e:6c:
3f:86:57:db:a1:2c:1a:6a:4a:a2:30:ce:ce:1c:4f:
53:e6:64:8f:f2:dc:a4:da:fd:71:9f:51:cb:d0:51:
76:0c:c3:56:bd:eb:8a:b3:25:cc:22:13:ae:23:d2:
11:c2:53:5f:36:fc:95:07:e6:d5:57:69:fe:a1:d6:
80:0c:54:60:16:b9:75:ad:8b:0f:9f:40:aa:74:61:
5d:5b:f8:e6:b0:76:40:b4:87:dc:64:15:66:6f:22:
4f:c1:86:d8:1c:4f:97:a4:a2:5e:4d:10:0e:7f:2e:
a1:a6:fb:52:44:f8:fb:80:43:e0:c0:c3:cc:78:69:
44:85:7f:1d:1b:d0:48:09:6b:80:73:56:85:cf:64:
a0:2a:c6:a9:08:7a:a6:02:8b:6c:2c:d0:91:0a:52:
c3:dc:85:21:26:d1:cf:c6:ce:22:84:a9:2b:4f:6f:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E4:B5:B1:98:04:5C:8A:7D:66:D7:6B:ED:D6:1E:84:A2:2E:F4:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc94db07-ccf0-3f29-84f5-546b05f69b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:2c:55:d9:79:41:f9:91:7d:2c:39:bb:a5:de:d6:5a:9e:73:
ed:ec:bc:e1:52:1a:2a:e7:e4:58:be:04:fa:3a:47:eb:f0:d6:
85:eb:1a:1e:07:c9:b5:e3:ee:90:a1:47:54:ec:fe:b9:8b:c0:
91:bf:02:11:51:b9:fd:a3:e4:eb:40:22:d4:c5:64:c5:ff:d4:
e2:00:4a:1b:a9:13:c9:7b:57:69:56:62:d9:8d:a3:59:aa:3f:
a4:e6:f5:c7:9d:39:27:02:dd:df:3b:d6:36:c1:8e:e3:2e:25:
60:42:50:e3:79:b7:cb:21:7f:64:c6:51:22:b4:a6:eb:98:48:
f4:00:e6:2d:16:93:e5:16:b1:2e:20:ef:f3:84:53:3a:ff:33:
e0:b4:95:36:f8:3c:74:78:93:2e:31:5a:7b:4c:80:d9:dd:6d:
d4:73:4f:77:39:c6:b1:1f:f3:1c:89:eb:50:d3:b0:f4:32:a4:
a8:c9:4c:74:d8:ea:85:47:9d:49:85:6e:31:fc:16:b3:88:58:
e4:59:83:8b:3e:3a:54:8c:14:bf:59:cd:f0:53:db:14:37:e3:
d3:84:1a:08:16:e5:ee:6f:fc:9f:75:90:f0:ee:e7:19:16:67:
53:78:98:28:1c:74:89:5d:5e:fa:cf:14:fd:37:44:b7:46:7a:
0a:0e:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:48 2025 by rpki-client