Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce1846c7-3f0b-3649-8547-d12c2f55ec1c.roa
File: ce1846c7-3f0b-3649-8547-d12c2f55ec1c.roa (raw, json)
Hash identifier: hxd8V0xaFVXrTBplxu6ZybuwttyJA/Yvr0K0az+zkuU=
Subject key identifier: 7E:94:29:43:67:09:9B:80:C7:27:50:C8:34:01:D4:C3:02:89:FC:7A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F4B5E2247B555DC8DDEA45E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce1846c7-3f0b-3649-8547-d12c2f55ec1c.roa
Signing time: Sun 18 Sep 2022 12:00:00 +0000
ROA not before: Sun 18 Sep 2022 12:00:00 +0000
ROA not after: Mon 24 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 168.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:4b:5e:22:47:b5:55:dc:8d:de:a4:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 18 12:00:00 2022 GMT
Not After : Oct 24 04:00:00 2022 GMT
Subject: CN=5dda7aaa-4831-4375-a876-6d7d65cecab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:d4:aa:e5:c5:e5:5b:e1:65:84:c3:f0:59:
5d:4f:97:01:dd:4c:c6:15:13:cc:c4:9d:0e:f6:d3:
8b:8f:ca:84:27:b9:da:00:1a:71:07:13:70:c1:4f:
f8:d4:e5:ee:e1:b8:ef:3d:cb:91:03:46:0c:33:60:
14:f3:3f:c8:12:45:06:4f:39:98:76:32:d7:f2:0d:
ed:60:f1:dd:a2:68:1e:78:34:be:a6:75:b7:a3:1e:
22:a0:46:78:0c:39:fa:50:39:8c:31:e2:e1:90:0a:
35:cf:e7:8f:45:91:7a:4b:37:bc:34:de:e2:13:9e:
29:db:8a:7d:0b:f8:f5:f9:41:ec:0e:50:6e:db:09:
50:fb:34:b6:38:7c:18:4b:65:56:66:5b:56:19:06:
72:5b:4d:90:ca:ef:5a:2d:67:ee:0d:3f:4d:cd:b5:
7c:10:76:11:b0:9d:92:d8:dd:6c:ff:28:31:ad:cc:
15:3b:bb:3e:c7:ee:10:59:f1:15:4d:1f:b1:c8:d9:
8f:67:9f:ef:12:a3:a6:3d:c5:a7:ac:b5:c6:7f:f1:
68:54:09:49:98:37:cf:f5:97:0e:a9:df:05:16:8c:
9a:3d:6b:86:f1:43:a8:1e:0d:a0:26:7a:37:05:61:
2c:7c:38:9e:b2:f6:8d:1c:b6:68:f8:f9:f0:86:14:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:29:43:67:09:9B:80:C7:27:50:C8:34:01:D4:C3:02:89:FC:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce1846c7-3f0b-3649-8547-d12c2f55ec1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:49:95:81:31:1a:4b:8d:ca:5d:04:08:9a:ac:e7:ed:b8:36:
7f:1d:e2:51:c4:8c:02:01:22:1a:d4:65:25:c9:ae:00:fd:3d:
bf:33:dd:ae:be:4e:33:23:c1:c1:6d:f9:8c:33:d0:a6:cb:92:
23:09:0f:d5:9a:f9:13:b1:c6:79:1d:83:66:d5:d8:84:de:2c:
bf:9e:ea:4c:da:84:cc:06:c5:3c:48:29:76:fe:b7:df:eb:3d:
08:2d:6b:7b:f2:65:2d:a0:a6:4a:29:68:3e:4c:67:6c:1c:c6:
23:ea:c9:0a:72:27:6c:29:4b:2f:26:af:a0:11:ce:b8:8a:98:
77:79:72:4b:0b:09:f4:b2:e4:bb:36:2f:ac:e4:49:f8:e0:03:
1d:37:63:09:2e:93:75:65:5c:f8:f4:c4:70:ae:44:42:2b:06:
2d:9e:58:01:4d:0a:20:1d:e7:84:04:e1:22:ef:39:e5:3b:ae:
e6:9a:80:4f:f9:7a:20:97:c2:ad:d3:f0:ab:90:81:a1:64:5e:
bf:24:d2:42:7b:a5:f3:4d:85:b0:b3:c1:44:1e:57:b0:2f:30:
7d:0b:c9:e1:7c:6d:aa:d3:e3:53:03:1b:74:9d:df:92:67:f1:
e0:4b:66:19:9d:7a:dc:cb:1c:ed:1f:f0:2f:3c:93:78:81:51:
79:68:2f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:42 2025 by rpki-client