Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6f14844-41e3-372a-9fd5-1b7a6f453241.roa
File: d6f14844-41e3-372a-9fd5-1b7a6f453241.roa (raw, json)
Hash identifier: byutxcMzl459GVwbzdY9+Ttb1VHPXwVvQPKebNy+4r4=
Subject key identifier: AE:91:62:98:2D:7F:19:AF:70:E7:42:FB:11:F2:93:EB:E0:4D:40:AA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F690F19BD1E6FD0D55D23FDC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6f14844-41e3-372a-9fd5-1b7a6f453241.roa
Signing time: Thu 29 Sep 2022 16:54:08 +0000
ROA not before: Thu 29 Sep 2022 16:54:08 +0000
ROA not after: Fri 04 Nov 2022 04:00:00 +0000
asID: 8987
IP address blocks: 160.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:69:0f:19:bd:1e:6f:d0:d5:5d:23:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 29 16:54:08 2022 GMT
Not After : Nov 4 04:00:00 2022 GMT
Subject: CN=087d1c33-308c-434e-9619-bc8c21540cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:e2:20:ae:12:f8:20:06:26:78:38:0a:35:
f7:bf:da:e2:68:4e:76:e5:5b:b4:18:c0:aa:f6:0c:
88:0e:da:5a:c9:8e:27:ec:64:0f:6c:e7:bb:c8:4d:
45:b4:72:40:1d:80:f0:c9:79:d5:00:ea:5d:b2:4b:
9a:fd:70:61:7a:c3:f1:65:c4:e7:59:cd:2b:a5:c5:
eb:46:4a:d5:51:05:cd:f2:6f:dc:f2:ff:a1:99:88:
ef:d2:99:08:e5:0e:be:17:3d:f3:ad:1f:d5:42:f5:
00:4a:0c:a4:f8:84:66:da:f0:d5:45:71:42:c6:90:
92:75:47:12:4d:c1:89:7c:de:94:20:b0:35:da:25:
6d:e7:c3:fd:68:26:78:93:05:65:67:37:92:17:0a:
6f:6b:b0:31:3b:cc:77:19:5d:36:62:d5:06:5b:fd:
6b:b2:30:ee:d7:12:4c:80:2c:ff:19:ff:f8:65:8c:
19:13:2c:71:92:0d:69:54:11:f6:1c:8d:d7:f8:ee:
d0:56:fd:6a:45:a8:c7:b7:52:b9:a9:f5:89:04:3e:
86:38:e9:bd:1e:67:2a:58:5e:31:25:64:65:e8:a3:
ec:cc:a7:b3:47:2d:87:93:11:72:95:0f:39:18:38:
7e:94:f4:07:30:19:dd:dc:aa:1b:9c:bb:65:59:66:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:91:62:98:2D:7F:19:AF:70:E7:42:FB:11:F2:93:EB:E0:4D:40:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6f14844-41e3-372a-9fd5-1b7a6f453241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:bb:8b:5c:5f:b0:7c:7f:88:1a:5d:3d:95:21:20:96:b5:45:
08:4d:c2:2b:bf:05:ac:5f:ba:43:b4:5d:7a:1d:79:3b:e2:62:
0d:42:8b:c4:ca:d7:1f:74:9b:7a:ed:ff:a7:ea:84:a6:50:6a:
84:a9:bc:d6:d5:61:08:e8:bc:af:11:06:fe:80:bf:96:4f:ee:
e8:3b:9f:1b:38:cc:be:97:7a:f7:10:76:42:a5:b7:3f:ba:0d:
1b:42:c6:4a:33:80:dc:d2:a3:51:bb:dd:3e:92:d2:9c:aa:c2:
0f:2e:96:27:45:7c:00:73:00:ca:d4:14:1e:dc:76:bd:d1:12:
d7:d1:d5:d1:03:bd:d0:31:5c:73:1c:42:7c:5b:25:3f:5c:50:
10:54:38:d5:86:ba:24:86:f4:f4:cd:89:fc:8e:2d:17:3f:38:
01:a5:37:32:ac:e2:24:d7:b3:69:35:78:3f:aa:6a:0a:e6:5f:
9f:21:00:89:01:d0:5d:80:2f:03:b9:bd:a4:e1:01:a0:fa:76:
35:3d:6f:f2:86:cf:63:38:63:88:d0:9e:e8:31:6a:ec:61:c4:
48:e8:8f:0e:1d:d6:10:1c:05:2d:ad:59:ee:fb:22:64:7a:57:
7f:39:af:24:16:c5:2e:99:89:0d:8c:48:9e:8c:f9:28:9c:b4:
c9:b1:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 20:47:14 2025 by rpki-client