Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d01a0f53-9e62-32a5-8788-68b9352dc369.roa
File: d01a0f53-9e62-32a5-8788-68b9352dc369.roa (raw, json)
Hash identifier: ISSO+NEaNUmFRX92i0zMSsrtB8pB0HozcnrituxvZOw=
Subject key identifier: 7D:9A:A9:F2:00:AD:96:A1:66:40:50:95:CE:F2:E3:A2:FC:F5:2C:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840735994F066EEC2154D83FD00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d01a0f53-9e62-32a5-8788-68b9352dc369.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 134.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:59:94:f0:66:ee:c2:15:4d:83:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=c002268c-47ef-4514-a757-69db1071816b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:ab:32:81:cc:c7:c2:58:72:69:2e:46:c3:
ca:72:e9:e6:a3:6b:37:b0:41:21:a7:05:c4:1a:df:
7d:12:05:b1:4c:f2:52:df:15:5b:f6:8a:b9:c7:77:
b6:b7:25:d1:65:fa:f3:9f:73:78:43:ae:f2:5d:83:
b4:4a:07:dc:8f:38:cc:f1:9b:f6:3f:ae:c6:90:1c:
02:4f:df:57:3f:ed:66:2c:e0:82:c1:c6:1b:1d:ab:
34:51:95:df:c8:db:11:aa:17:1d:cf:bf:9e:e3:4b:
93:d6:81:06:ba:6c:66:c0:e2:c2:2e:25:a5:d1:f7:
c6:d6:cf:ae:10:86:d7:7f:0c:fc:0c:b5:02:5c:d8:
a4:c0:f1:82:1a:d4:30:2d:79:fa:82:1a:9e:6b:15:
e7:4e:16:0e:a7:16:c8:c3:96:5c:b9:b7:08:30:be:
72:24:07:fc:76:3e:55:7e:a0:48:0f:ff:9d:91:22:
c8:83:d8:cf:fa:6c:c5:80:97:38:93:41:be:eb:d1:
01:90:66:93:c9:01:ae:7d:f9:9d:53:44:32:a6:1e:
ff:9c:f0:83:36:3a:c9:e8:95:28:aa:ee:2e:a5:99:
2b:96:08:21:71:ea:5c:a0:d8:d8:62:1d:30:52:61:
83:79:d3:d4:47:41:85:7f:32:d1:14:81:2c:05:80:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9A:A9:F2:00:AD:96:A1:66:40:50:95:CE:F2:E3:A2:FC:F5:2C:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d01a0f53-9e62-32a5-8788-68b9352dc369.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
134.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:37:75:e2:26:03:64:77:36:49:cf:07:dd:ac:f4:c2:cb:30:
d2:30:77:fa:48:04:68:7d:37:8d:e5:af:fc:17:f3:6f:a1:43:
cd:88:72:23:95:64:fc:6e:bd:82:4b:02:5b:27:4f:15:78:ac:
13:40:d8:06:e1:3d:d1:7e:3a:ef:2d:db:92:4f:25:8a:6c:c6:
99:f4:93:07:2f:e2:62:2b:34:16:2b:65:6d:a3:66:9e:f5:73:
e0:74:75:ad:b6:fb:f2:72:26:a0:b4:85:b1:04:a9:5c:c0:93:
42:dc:c1:59:05:b6:1e:a3:8b:f0:80:32:3d:17:bc:64:ba:ff:
36:e2:76:ff:cc:94:e2:86:30:94:f2:6a:c4:6c:b3:26:2d:76:
e0:1b:47:f6:9f:5a:cd:0c:ea:8f:e0:dd:84:0f:49:fe:37:48:
6b:38:41:49:35:4a:54:f3:a4:e3:92:50:5b:f0:ac:ee:95:b5:
4b:7e:bb:93:e0:48:58:08:ae:33:4b:ea:eb:50:90:10:8e:85:
f6:c8:b0:d5:7b:d2:7d:c3:c2:f0:e2:a2:5f:a4:63:c8:89:a4:
05:0f:ae:b0:91:f4:16:48:e9:ce:a9:39:23:49:77:fa:b3:5a:
c8:03:30:b3:50:ca:3a:b7:75:0f:bb:9e:d8:a0:0e:34:9a:1a:
d1:e7:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:23 2025 by rpki-client