Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd2d8ba5-0963-3136-a14d-20f7824c128d.roa
File: dd2d8ba5-0963-3136-a14d-20f7824c128d.roa (raw, json)
Hash identifier: rcPjAuY5hWI2N7ellGoxAn+pHKGwMsRv8uNo+FmRz54=
Subject key identifier: FB:1D:27:B2:39:EE:38:64:CD:67:2B:CA:C2:AD:7F:EC:38:13:DB:E3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE9896414D1FBCF9B9F018200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd2d8ba5-0963-3136-a14d-20f7824c128d.roa
Signing time: Mon 14 Nov 2022 12:00:00 +0000
ROA not before: Mon 14 Nov 2022 12:00:00 +0000
ROA not after: Tue 20 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 151.148.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e9:89:64:14:d1:fb:cf:9b:9f:01:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 14 12:00:00 2022 GMT
Not After : Dec 20 05:00:00 2022 GMT
Subject: CN=92a84e47-f6c6-41e3-b117-ae6e0d7b3af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:f6:91:d6:21:65:75:f4:15:ed:01:6c:41:
80:ab:8c:ca:f8:00:b4:96:85:a2:b2:b3:67:24:09:
5f:8e:68:10:2e:b6:c9:fa:b8:86:7c:b7:44:c6:48:
6e:72:7b:43:41:c4:c1:3d:5c:e5:c2:a6:3a:cc:9d:
8a:68:65:a2:92:ef:54:78:b4:57:a0:01:00:62:39:
4d:11:9b:f4:fb:98:30:4e:c2:de:60:c5:4b:f9:f6:
1e:46:f3:e2:03:20:49:14:e6:e6:bd:bf:51:1b:ac:
7a:47:f0:ff:5d:30:a0:b0:33:e3:e7:f2:2c:e2:b6:
e8:4b:98:a0:c8:28:a6:fb:11:ce:cc:8a:b3:dd:98:
5a:1c:7a:af:ba:88:2a:b8:53:7c:3f:b4:29:f4:c8:
1e:12:55:29:d0:f9:b7:90:90:83:04:50:ea:84:5e:
d7:f3:97:c5:54:e1:9b:e0:e7:52:cf:ca:69:eb:5c:
a8:61:21:f9:e2:8f:87:15:be:65:a0:20:42:19:f1:
1f:8b:2e:ae:dc:71:11:79:88:2a:10:26:6e:e5:d3:
14:ce:61:c6:b6:94:c2:fb:36:9d:e7:9a:0f:05:06:
af:d3:b1:83:eb:4f:75:b1:04:4c:ab:5a:09:1d:f9:
76:a2:17:af:f6:a5:a6:63:d0:d9:ee:44:a0:f1:33:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1D:27:B2:39:EE:38:64:CD:67:2B:CA:C2:AD:7F:EC:38:13:DB:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd2d8ba5-0963-3136-a14d-20f7824c128d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:66:b5:6e:75:26:97:3e:db:4c:f9:6f:c0:92:ed:98:20:26:
dc:25:b9:3b:3e:4c:12:00:20:13:aa:c9:e2:c3:a8:5a:fe:7e:
96:19:c0:a1:b4:33:e9:2e:35:12:87:f2:6e:0e:b7:dc:03:a3:
33:54:63:37:9f:6b:fe:b4:35:1f:2b:d6:1e:dd:17:5f:fc:6f:
6b:19:5c:3f:68:53:60:28:70:7c:c5:44:ac:b8:4d:e1:c3:c9:
36:dd:b9:57:ea:19:74:f5:0d:73:43:dc:f5:94:95:48:42:5f:
f9:96:18:41:05:a3:9e:75:04:39:0d:3b:ec:e6:3c:e3:b2:51:
5c:b2:ed:e9:f9:19:b2:02:d0:c0:ab:de:ab:be:4f:70:97:a4:
dc:cc:62:f6:d0:dd:4a:a5:5c:5f:b4:b7:6d:7c:e9:d2:92:43:
45:0e:f1:44:6a:ba:6a:c4:ea:17:48:85:ee:ff:0d:39:0d:65:
22:71:a1:6c:6a:25:fd:d0:0b:bb:5a:52:f9:cb:03:fc:aa:ba:
24:bf:d2:09:98:3b:89:0e:60:2a:b1:26:27:db:ad:df:c6:45:
60:e5:ae:fc:b9:23:3a:68:bc:53:0a:bb:39:61:37:3d:6f:8a:
ae:db:23:52:af:a1:9f:df:82:76:87:1e:88:37:35:f0:cb:30:
61:b5:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:38 2025 by rpki-client