Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cdea8ed4-2b3f-3eaa-a312-5e796567e906.roa
File: cdea8ed4-2b3f-3eaa-a312-5e796567e906.roa (raw, json)
Hash identifier: MCmwXPRkdApi+VOqIK2NbdB/8fsIwYslRkUgCXCXioc=
Subject key identifier: 07:AB:23:D7:F8:0E:56:B3:85:B6:C1:1E:8B:93:DB:14:AA:09:FC:D3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D6743651B5C20029321697400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cdea8ed4-2b3f-3eaa-a312-5e796567e906.roa
Signing time: Wed 30 Mar 2022 04:00:00 +0000
ROA not before: Wed 30 Mar 2022 04:00:00 +0000
ROA not after: Wed 04 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 170.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:67:43:65:1b:5c:20:02:93:21:69:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 30 04:00:00 2022 GMT
Not After : May 4 04:00:00 2022 GMT
Subject: CN=9fd9cc2a-9e3a-4df8-93a4-291e020677a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:80:fe:b5:4a:7b:d4:83:fa:94:f5:d2:ae:
28:74:05:6b:c9:5c:9f:32:08:11:3f:02:28:a8:e0:
3f:e9:a7:55:23:8b:bf:4b:77:18:27:0d:a9:3f:86:
28:1e:57:99:4c:6c:84:32:5c:ae:61:75:1c:81:da:
fd:29:ea:9a:b6:77:49:33:5b:38:84:74:7a:37:bc:
60:b1:0c:0a:6a:cc:37:a7:1e:1b:66:98:6b:be:5d:
cc:fa:af:0a:7c:49:6b:cb:14:7d:34:b4:f7:9a:a0:
13:fd:f3:92:40:00:b8:5f:17:5d:cb:a8:24:48:0f:
18:a5:32:cf:9d:b5:3b:ab:75:3c:fe:76:0f:31:15:
d5:3c:f4:38:c4:54:83:23:b5:4c:30:93:c5:a1:91:
a5:51:2e:20:a6:d8:05:dd:9e:05:f3:8b:2f:8d:bc:
ed:53:84:76:8d:f6:c7:30:87:8c:58:51:37:4e:37:
e3:94:ef:22:dd:d3:dc:7b:33:1e:0f:b3:da:50:6c:
fa:4a:ba:8e:82:45:b2:53:34:3b:4e:89:2c:ab:b4:
71:b8:31:e3:d6:b6:b0:36:fb:a4:e3:ce:48:d9:b4:
57:6c:5f:26:b5:6b:6d:5b:3e:67:bc:cf:e7:de:9e:
14:2a:26:52:e8:4c:b6:5c:39:fc:02:8e:50:8c:57:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AB:23:D7:F8:0E:56:B3:85:B6:C1:1E:8B:93:DB:14:AA:09:FC:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cdea8ed4-2b3f-3eaa-a312-5e796567e906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:c0:31:14:b0:d6:5a:9e:1c:57:62:33:02:04:f5:28:df:8a:
01:89:a7:4a:8f:72:df:9c:ca:cd:cb:4b:ca:93:bc:1f:08:8f:
e5:69:66:bf:79:cf:0f:09:52:83:43:38:df:b7:2e:de:e0:73:
1f:2e:59:64:43:9e:4a:c2:89:0a:8c:19:ce:05:13:21:f4:b7:
86:be:a9:fa:af:82:0e:fd:60:85:77:08:70:91:13:b1:57:d5:
05:b8:61:34:3e:0c:62:25:09:43:e8:f5:26:66:c3:84:d6:03:
01:0d:0e:29:e7:91:79:5f:b0:02:97:90:97:65:55:61:fa:ce:
c9:00:bf:85:4d:1e:a9:3d:7e:a2:9b:a5:57:1a:da:de:f1:20:
58:11:bd:8a:ac:e4:0e:c6:68:6d:a6:dd:bc:7a:22:eb:bf:51:
d4:e2:e5:cf:68:a3:7f:68:5d:c1:c0:2c:3d:df:70:c5:ea:73:
b4:76:54:b6:3c:30:43:75:ca:cf:1f:8d:31:2d:4c:d8:64:63:
2d:ec:9f:40:50:63:bc:57:39:86:fc:5f:6e:01:fe:ea:60:26:
4f:e4:4e:93:7c:d5:2a:f6:33:94:ea:32:c8:ca:2a:4c:3a:59:
e8:f3:e1:c6:98:28:36:d9:b2:55:84:19:68:ba:30:95:c4:1f:
20:13:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:18 2025 by rpki-client