Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dcab1789-5c4a-3b5a-ac67-78cdf7936894.roa
File: dcab1789-5c4a-3b5a-ac67-78cdf7936894.roa (raw, json)
Hash identifier: wXksFp5C0vQ3uCm5wU9C69/yuPsmU59V9ZT8SVbkWQk=
Subject key identifier: C4:3C:5A:B9:49:DE:BD:71:C2:AC:AE:45:C2:E0:18:58:0D:94:6F:31
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F51D76B56925C2E1027DE2C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dcab1789-5c4a-3b5a-ac67-78cdf7936894.roa
Signing time: Tue 20 Sep 2022 12:00:00 +0000
ROA not before: Tue 20 Sep 2022 12:00:00 +0000
ROA not after: Wed 26 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 137.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:51:d7:6b:56:92:5c:2e:10:27:de:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 20 12:00:00 2022 GMT
Not After : Oct 26 04:00:00 2022 GMT
Subject: CN=354e311f-cd1d-4cf8-9a8b-a8b579898ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:ac:0f:11:3d:ff:30:8b:07:26:d2:ca:dd:
9a:4d:bf:c1:ac:17:96:97:65:fc:aa:a5:f3:77:80:
b9:6b:46:e6:56:2f:db:62:db:56:a4:4d:56:89:09:
ac:e7:76:7c:17:d0:99:d1:47:88:d1:7c:ba:10:27:
50:aa:f2:d8:6b:e8:54:01:2c:90:e7:41:32:9b:b6:
9d:af:c7:cd:56:07:e3:aa:6d:d8:dc:d6:98:5e:6f:
88:f2:ed:77:d2:92:59:a5:91:b2:cc:af:21:4a:d3:
81:1c:ed:9e:84:73:5c:bb:a4:94:8f:a6:77:d2:84:
09:18:9e:c9:f3:01:3e:43:78:88:dc:57:63:ba:2a:
61:2c:00:f4:16:47:07:74:7b:f2:1f:af:12:d5:fa:
26:ee:a4:d8:ec:33:84:56:72:c2:34:5b:e5:81:6b:
f8:8a:79:d3:79:56:b9:72:d9:70:05:3f:ff:45:0c:
42:f5:7d:64:34:50:2d:06:0d:3d:e1:db:57:bf:16:
47:b6:ba:5b:bf:21:6b:ad:3e:da:ce:82:72:b5:a0:
ae:7e:13:67:ed:ed:c0:11:7d:3c:e1:e9:cc:bd:67:
8c:ff:34:a9:df:b9:2a:a8:1d:b5:de:68:71:6b:5a:
f8:ba:f0:f3:c4:1e:64:19:2f:74:ed:ad:2b:46:08:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3C:5A:B9:49:DE:BD:71:C2:AC:AE:45:C2:E0:18:58:0D:94:6F:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dcab1789-5c4a-3b5a-ac67-78cdf7936894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
137.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:3f:01:10:58:b5:1f:a4:30:09:39:f4:85:ab:ec:2a:3a:15:
07:eb:42:15:0c:8e:22:e9:5c:fb:2e:95:16:03:a5:ba:2b:71:
ff:df:2b:bb:17:d8:f8:ab:8a:ec:23:f4:4f:63:aa:1d:96:74:
39:61:46:00:21:a7:f4:3d:cc:40:6d:4c:cf:3c:e5:40:38:80:
19:e5:59:58:12:36:eb:77:33:88:dc:44:b6:3c:31:16:1e:bf:
12:81:73:76:90:9d:f7:bb:94:e6:cb:93:10:be:93:bc:85:48:
b1:bf:62:fd:30:23:3a:46:c7:a2:7f:e3:68:3e:19:ba:f1:d0:
28:2b:fd:62:8d:fc:9e:57:55:de:5d:0d:c6:f4:a7:7b:ea:55:
87:cf:0a:d9:81:86:a3:81:fc:83:e3:9d:c4:7a:da:56:b2:e7:
ea:67:b1:aa:e9:d2:a1:0c:96:28:ad:8b:15:21:a6:36:df:fa:
e5:8b:c9:ec:d6:9a:5e:ce:a3:2f:4c:32:ca:0c:e1:60:6d:30:
5b:6c:df:ff:20:2d:6e:ee:5c:22:1a:1d:a5:92:c9:a7:41:7e:
45:61:de:db:26:bb:a1:46:fe:b6:f9:23:bd:22:29:d2:74:09:
f7:30:b3:ba:1e:b5:5d:98:d2:19:41:ab:12:6c:40:36:c2:4c:
c4:9c:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:21 2025 by rpki-client