Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d589e667-d7bf-3925-8e3d-cac03c8aa4da.roa
File: d589e667-d7bf-3925-8e3d-cac03c8aa4da.roa (raw, json)
Hash identifier: PMsqoybh9vqC38THJ+QVwYA92pa0t026gEpiGpzHDK0=
Subject key identifier: 4B:7B:33:03:3E:62:56:1D:FB:D6:FE:B3:D2:18:70:28:68:0F:76:95
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E451EB5E070655D6BEF42D680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d589e667-d7bf-3925-8e3d-cac03c8aa4da.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:45:1e:b5:e0:70:65:5d:6b:ef:42:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=d2d36bb3-0f67-4cd2-a3ad-6801dfa08044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:1d:a2:cf:64:c7:89:fe:d4:27:d5:b9:b4:
fa:df:36:ee:73:c9:7d:28:70:f3:85:82:7d:55:68:
21:af:8a:e8:84:7e:cb:96:5d:17:44:c3:76:61:06:
87:c9:d9:e9:3f:cc:2a:b1:c8:18:24:ac:fc:ea:de:
f3:1e:f3:ac:90:9f:9c:9f:d9:0a:4f:41:3c:3a:4e:
11:8c:49:42:31:ec:1d:49:d4:97:e7:c7:54:15:da:
d7:93:e3:c9:8d:de:8c:dd:36:e0:e3:43:fc:12:a0:
05:49:6f:bb:e4:94:b7:79:90:2e:27:58:0c:33:35:
e6:bb:69:80:f0:ec:d9:34:6b:c8:9f:fe:09:e4:97:
1f:42:9f:35:23:f5:6d:71:70:eb:9a:b3:b9:3a:eb:
f5:c3:1d:c6:d6:9b:ca:31:50:44:2e:b9:be:3a:8a:
d2:82:bf:8d:c2:69:16:6b:8c:dc:2f:9d:96:78:df:
4e:e2:12:58:ca:08:02:2f:92:57:d8:b7:b5:b3:bf:
ac:36:f0:f5:4d:a1:3d:e1:1a:2a:85:55:c5:05:82:
9a:89:f4:8d:c6:89:2f:86:b9:bc:30:f7:cd:61:3f:
14:8f:b6:51:0b:0f:34:f5:88:a1:11:f5:57:66:d3:
d8:75:2c:ed:5d:89:68:30:32:c9:1f:9c:a7:32:76:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7B:33:03:3E:62:56:1D:FB:D6:FE:B3:D2:18:70:28:68:0F:76:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d589e667-d7bf-3925-8e3d-cac03c8aa4da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:94:61:fd:01:66:bd:2d:46:7e:30:17:4e:ad:6a:0a:4e:0d:
9a:11:f0:85:52:a3:c2:2f:c1:b5:c8:20:70:67:cc:a9:04:08:
9d:a2:e7:7a:e2:c8:d2:c3:18:99:b4:07:8f:4c:3a:b5:46:13:
52:e8:8e:be:a5:54:8c:c6:f5:d5:b7:e6:f2:fc:33:df:ee:69:
97:b4:37:d8:7f:c8:b7:a9:62:16:74:df:f7:71:6a:95:b2:2e:
34:04:5a:84:59:e6:68:e9:f1:9e:62:38:e8:21:67:38:b0:b8:
ca:8c:99:54:83:3e:91:f3:86:37:1a:67:00:c3:f5:37:2d:93:
0e:4d:21:c9:e1:af:77:f9:32:00:76:e2:c0:bb:3e:60:a9:45:
99:ac:24:74:5e:f6:1a:99:cd:3d:4c:3d:6b:49:5c:2b:f4:09:
f8:77:b9:55:21:85:24:f2:21:ed:1b:45:0b:4f:a2:b5:26:55:
5b:ab:d3:a4:d7:94:9a:f0:69:e2:20:2f:d2:19:24:ba:8e:0b:
54:28:6b:27:52:75:a0:b1:ab:00:1d:3d:e3:2a:a5:51:ce:b9:
93:69:fb:37:c2:13:74:d5:23:d6:10:5e:5a:e2:06:2c:4f:00:
ec:1e:4b:5e:92:a9:f0:94:cb:70:1d:df:e7:35:d4:86:66:12:
7a:fe:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:35 2025 by rpki-client