Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7f367ac-95b6-3280-8166-3bfdcb438029.roa
File: d7f367ac-95b6-3280-8166-3bfdcb438029.roa (raw, json)
Hash identifier: MPwIhJ+abQEFHjdUJQ6uZTA9sJhptieRlBz2AhuyVaE=
Subject key identifier: 0B:31:F7:D3:4F:D0:36:B0:A5:C2:00:8C:0B:6F:CE:D0:ED:0A:F6:36
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840276BE779FA082FAB11FDEE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7f367ac-95b6-3280-8166-3bfdcb438029.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:6b:e7:79:fa:08:2f:ab:11:fd:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=835e627f-4492-4cd3-88e5-2c50f77f2609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:2b:35:f7:60:bf:93:74:bf:c4:9f:ec:88:
3d:e8:49:97:50:aa:bd:55:b8:dc:76:f5:c4:1d:72:
5b:34:ea:7a:e0:9d:69:8b:fa:34:a4:1b:a4:f0:ff:
3d:b1:a3:16:ae:ec:5a:5c:9c:df:86:d5:49:61:f5:
36:53:16:7d:47:34:8f:c0:eb:da:20:3a:36:3a:ae:
47:01:c2:91:4f:37:fb:d0:3a:96:8c:c2:30:6a:b3:
81:ac:b1:c6:cb:54:b5:aa:b9:dd:0b:d9:5b:96:2b:
3a:36:4e:4d:a2:23:c6:d0:de:49:8d:1a:83:06:b5:
83:eb:a2:d1:c4:46:14:a5:70:27:22:28:ab:85:62:
b0:aa:56:74:f3:84:02:6f:84:f2:c5:b8:8e:ff:33:
c7:34:b8:9e:c3:bf:3a:b0:3e:8d:be:f7:cb:b8:a0:
cd:ba:7d:b5:90:c5:b8:93:45:b4:ed:51:20:c4:d6:
42:b9:46:fc:86:97:d4:33:61:76:40:37:9d:b5:0c:
1e:cc:3a:18:0d:2a:bd:5f:d0:96:e3:ad:09:c9:38:
70:15:e9:32:64:8d:8c:0b:2a:77:b1:59:68:50:53:
3d:a3:41:86:2a:49:7a:6a:43:41:9d:36:bd:e4:d2:
4b:f9:fc:21:cd:bc:c6:31:0a:29:e9:d0:9e:2e:cf:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:F7:D3:4F:D0:36:B0:A5:C2:00:8C:0B:6F:CE:D0:ED:0A:F6:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7f367ac-95b6-3280-8166-3bfdcb438029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:b6:e1:7a:57:f6:a1:4f:4e:33:42:08:42:98:e4:ad:f8:15:
25:c7:20:44:a2:07:87:39:3a:30:cd:80:b2:08:74:f8:ff:b8:
b2:51:27:a1:87:98:e5:6e:f6:d7:5d:a3:86:91:06:fc:83:3c:
f4:81:51:d0:c0:08:62:1e:1f:4d:16:fb:d8:16:d2:a6:1f:f2:
d6:9c:18:e3:77:3c:f6:8a:88:cb:dc:fd:0b:d8:24:de:f3:e2:
9f:ce:a8:70:e4:3e:aa:42:06:55:9b:99:f6:b7:a8:f6:2a:d0:
21:0c:8c:22:42:ca:f7:3c:b6:fe:37:79:7a:c3:fd:42:8c:8f:
04:a5:b0:d2:f8:88:92:f9:2c:15:1c:d1:c6:7c:23:b9:fc:91:
18:4c:6e:10:2c:df:70:e6:5d:5d:ee:96:08:87:05:00:bc:4c:
6d:ff:1b:b7:cd:b3:13:58:e6:25:f9:2a:8c:ea:ea:eb:56:58:
d8:37:25:cf:ed:33:3f:45:6d:5e:5a:25:3d:84:ee:f9:62:f8:
0b:0e:af:17:19:44:eb:60:3b:05:cf:c4:5e:d6:3a:68:83:48:
92:45:1b:d7:51:b9:12:68:ba:b1:9f:15:03:3e:3a:e1:3b:9f:
2f:98:22:49:04:59:99:cc:51:01:d8:48:40:87:6b:c3:58:94:
83:34:f2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:03:38 2025 by rpki-client