Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a6479e-8df5-3c09-88fe-34f491086eb9.roa
File: d2a6479e-8df5-3c09-88fe-34f491086eb9.roa (raw, json)
Hash identifier: oq9IJMKpx/i4JpoDjrJQXoaQ1u54vfOWD30GwALaq4Q=
Subject key identifier: 1F:DB:13:3E:8C:88:6E:C5:F3:E3:24:79:54:2A:3A:27:64:EA:44:6A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404347AABC97EC0E6C6181BB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a6479e-8df5-3c09-88fe-34f491086eb9.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 170.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:47:aa:bc:97:ec:0e:6c:61:81:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=b92554f3-3b94-4576-81a8-ac9ccaf7f71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:ab:c2:60:08:08:c5:93:b6:0d:32:3a:12:
f3:6f:c3:ca:ee:18:c5:83:0d:0f:01:c1:6d:80:83:
0e:ce:8b:98:75:ea:ad:29:44:15:f6:4b:84:b6:4d:
cf:a6:ee:0f:ea:22:ac:dc:54:2f:a6:2e:0f:54:d7:
d0:33:e1:f7:7f:09:2e:ae:c9:13:ac:92:aa:f2:3f:
30:e3:f6:e7:88:9c:82:32:e5:2a:17:19:c2:eb:81:
a5:a2:f6:0b:38:7e:2d:05:b3:c1:c3:03:5b:5c:a5:
6d:be:92:b3:f9:df:d5:9d:2c:c5:1f:c1:46:e7:04:
df:14:49:b7:3c:12:5a:ad:47:e3:c4:e8:60:77:a8:
50:b3:5a:3c:e7:b8:82:04:a7:9f:3a:76:32:e9:98:
2a:c8:83:bb:72:af:5b:fe:04:94:79:68:2c:bf:84:
82:b3:62:a2:21:6e:a6:35:c1:9b:e5:e7:52:d6:50:
1c:ef:07:24:20:c2:ec:28:f2:49:d1:ec:32:aa:02:
94:40:e7:c9:8b:41:db:b4:f2:c5:23:b6:ad:7c:3d:
f1:4c:78:81:3a:8e:a0:ef:68:b9:0e:bc:30:b2:41:
be:84:95:6b:31:99:c0:4d:4f:c9:f0:94:ae:58:f4:
3d:4f:7c:56:34:6f:57:c1:b9:17:81:29:d5:c0:f1:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:13:3E:8C:88:6E:C5:F3:E3:24:79:54:2A:3A:27:64:EA:44:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a6479e-8df5-3c09-88fe-34f491086eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:d8:a6:1f:29:af:52:cb:38:1d:1f:77:a2:ab:e5:2d:2c:44:
40:99:f0:55:68:c2:49:c9:ff:69:0e:fb:e7:2b:58:ab:00:0d:
90:54:be:53:43:4e:b4:0b:a1:f7:b4:be:af:2c:b5:6b:dd:b3:
22:a0:2e:86:75:ed:30:41:d9:93:a9:1e:fb:54:c8:07:fa:48:
ed:a0:0a:ad:83:40:09:5e:c8:54:02:1a:04:02:98:3d:2c:ef:
76:e8:3b:32:88:c4:1a:d7:e2:c5:b2:42:e5:30:32:b9:f1:01:
9a:86:a5:03:2d:84:73:8e:88:81:8a:43:bf:04:64:68:b5:2a:
60:0b:a5:47:8c:d1:30:fe:0e:cd:05:7f:2d:70:ac:72:3e:7f:
c0:71:72:38:94:f5:0a:5a:53:b3:c1:96:75:ad:20:ed:74:c8:
fe:29:0d:7c:b7:16:0c:e2:25:c8:d3:bf:83:59:a5:2d:4d:5e:
ac:4f:02:e6:88:8c:3d:7b:a4:c1:20:4b:1e:19:30:d6:7a:c8:
7a:2f:5a:6e:a1:1c:f7:48:e2:c4:1c:c9:ba:d4:e8:aa:f6:53:
68:28:f0:ce:c8:f9:e8:b8:7b:3a:03:8e:88:98:a0:0e:f0:03:
95:3b:61:45:da:c7:e0:87:5a:90:4a:5d:cd:e8:17:16:2b:44:
a5:33:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:25:52 2025 by rpki-client