Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5f0eb99-2dee-316a-8b18-092a82651ba1.roa
File: d5f0eb99-2dee-316a-8b18-092a82651ba1.roa (raw, json)
Hash identifier: R9qSFmId1AdqAPBMORnVAN2fsm8lZr1+EcvFsM8+pOc=
Subject key identifier: EA:0F:EE:6C:74:53:FD:59:D2:75:C6:E6:E3:34:C1:DC:17:80:4A:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E4552BCEA3877B4F017163160
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5f0eb99-2dee-316a-8b18-092a82651ba1.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 156.4.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:45:52:bc:ea:38:77:b4:f0:17:16:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=c5ff59ad-652e-4f8b-b398-1056ef488ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a2:0a:69:db:8b:00:74:e2:a9:8e:38:de:3c:
ec:e8:88:22:e7:47:d0:56:1b:f3:e5:81:c9:55:1a:
1d:65:9a:1c:78:1c:be:2d:7d:e9:8f:0d:f0:28:b5:
b2:70:2f:a3:9d:b3:a9:cd:13:4b:76:8f:76:4d:97:
e3:62:4c:28:44:e9:ff:b7:10:77:6d:c9:9c:73:b8:
7c:2e:47:33:eb:45:f4:43:f6:ec:f2:24:24:eb:19:
ad:70:88:41:67:3d:a2:49:3f:dc:7b:71:4b:a7:08:
ce:1a:b9:91:e3:22:4f:49:85:2c:02:0e:63:2f:f6:
3d:0f:2d:10:4c:32:5d:07:78:e0:01:16:bf:01:95:
91:74:6d:b5:3f:56:76:ff:81:9e:2c:bc:41:bc:ab:
9e:b8:83:73:66:37:d1:6a:b7:6b:1e:e4:39:e3:d7:
2c:a1:3b:70:c5:3b:d0:db:18:9a:63:6d:14:1e:03:
07:ff:e5:78:de:80:3f:07:90:ce:67:ab:e9:a4:68:
7f:dd:22:1c:ae:9c:80:4f:e4:c2:81:aa:42:c6:50:
df:95:ae:79:57:a2:31:60:fa:74:0d:98:f0:05:d5:
ed:2f:00:98:59:c1:87:56:ec:26:6d:14:51:14:5c:
d3:ff:34:2a:b8:14:14:b3:e3:26:91:04:b3:86:86:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0F:EE:6C:74:53:FD:59:D2:75:C6:E6:E3:34:C1:DC:17:80:4A:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5f0eb99-2dee-316a-8b18-092a82651ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
156.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:39:54:33:f1:d5:08:cc:2b:d0:83:e9:8a:df:5f:fe:6d:e0:
87:d8:e8:4e:89:1f:20:79:16:ba:e9:5a:39:b9:aa:a2:94:f5:
72:51:a9:ce:1f:c1:ff:13:cb:5c:21:72:58:42:92:fb:32:7a:
e9:35:d0:59:d4:18:12:bd:8b:3d:2e:37:f4:3a:0d:20:25:9f:
b9:da:a9:a1:f7:0b:b2:0d:20:82:f8:d5:8f:4e:6f:cc:31:4b:
84:8b:f2:a6:08:13:3d:fc:ab:9a:ca:d9:ad:fc:d6:dd:3e:2a:
32:88:99:aa:e5:46:ac:a4:ac:8f:1f:55:3e:b3:ed:32:5a:9f:
d3:a2:84:37:6d:b1:5b:b6:1d:8d:de:f5:24:53:7e:e9:f7:de:
a1:b1:af:2b:21:0d:75:6e:64:68:a3:15:07:8d:ba:f3:40:de:
8b:5b:47:72:62:4e:01:c9:c7:f7:a4:a2:25:ad:fb:21:6f:3d:
c9:e4:7a:62:aa:6a:32:e2:c0:64:a4:97:f0:28:a6:d7:fe:2d:
21:67:ed:76:56:c2:34:07:d5:9b:d7:46:ff:42:e1:0a:d6:74:
0c:41:ce:1d:d0:08:0c:0b:68:64:af:f6:39:fb:40:46:e3:71:
72:07:11:2e:a6:3f:41:96:f0:a3:d8:9c:c4:3c:41:d1:e8:15:
0b:39:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:11 2025 by rpki-client