Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de7916cb-8964-37f4-8904-f1d1c1186034.roa
File: de7916cb-8964-37f4-8904-f1d1c1186034.roa (raw, json)
Hash identifier: HsL6IPNk2GfVk/VZb0coK3xYbrZ3IJ/Sy+bOv5dlQ+8=
Subject key identifier: 73:EB:DB:A6:22:DA:61:BF:FB:0C:4E:F2:99:CE:46:20:32:17:A4:ED
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C7C77B7A62D190DBF4F28C350
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de7916cb-8964-37f4-8904-f1d1c1186034.roa
Signing time: Wed 05 Jan 2022 05:00:00 +0000
ROA not before: Wed 05 Jan 2022 05:00:00 +0000
ROA not after: Wed 09 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 152.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:7c:77:b7:a6:2d:19:0d:bf:4f:28:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 5 05:00:00 2022 GMT
Not After : Feb 9 05:00:00 2022 GMT
Subject: CN=38e0b368-3284-4a4c-915f-24db83e4699b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:36:0d:20:11:be:50:2b:5e:fd:1d:dc:a0:
df:c0:80:c7:82:36:b4:71:f8:19:a9:7f:6f:15:9c:
b8:78:b8:76:4a:b1:f6:27:e1:a2:12:50:e2:6a:7e:
b6:7e:90:7a:18:7d:2c:ce:fe:42:29:63:e2:f1:81:
bb:a8:da:db:43:bf:04:36:5e:70:b6:7a:28:ab:50:
96:3c:eb:24:5b:f0:89:5d:fa:f9:a1:01:7a:72:28:
e2:48:37:c0:da:46:1a:0d:91:cf:3a:3f:a2:0c:e6:
bd:c8:59:3c:8f:68:16:c6:21:75:d8:16:8a:cb:14:
5d:e4:34:2c:58:b3:50:b7:70:05:5e:72:71:ca:7c:
77:2e:29:21:08:e0:e0:de:ee:d5:89:a4:3b:c1:d3:
78:11:9e:c1:88:af:76:6c:8f:bf:e3:e0:29:31:41:
fe:01:01:8a:1b:90:7c:f6:0f:75:a1:c2:0c:e5:15:
b2:d7:f9:fa:13:31:d8:c3:90:a4:ab:86:fc:a5:2f:
47:15:30:50:7b:71:42:32:0b:d9:09:e0:03:d2:53:
8f:99:a0:b7:bc:76:f9:46:1b:dc:7f:18:9e:30:02:
1f:6a:ac:eb:4c:8c:ba:4e:ea:7f:2f:09:4b:ca:48:
ed:7a:e7:1f:34:2a:86:c5:f3:44:65:2a:d5:b7:59:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EB:DB:A6:22:DA:61:BF:FB:0C:4E:F2:99:CE:46:20:32:17:A4:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de7916cb-8964-37f4-8904-f1d1c1186034.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:23:bd:cf:18:5c:d5:4a:b9:8f:f3:4d:5a:62:ef:c5:80:3f:
d9:6d:e9:27:52:93:cb:28:a1:d8:97:9f:6d:f7:56:94:b8:cc:
d2:82:df:e9:87:c8:39:31:47:67:cf:48:f0:79:05:ed:ff:15:
97:71:7d:1a:91:ca:02:67:0d:9f:4f:ae:8c:b2:87:8f:73:82:
60:2a:66:30:93:02:13:ad:07:8e:b9:76:b0:82:1b:cd:2a:4d:
f1:30:4d:c5:da:ed:2e:92:de:00:77:7f:02:0a:b1:d9:d4:be:
2d:04:91:69:db:82:a8:30:60:c4:f0:55:8f:ed:20:ee:57:90:
13:d1:ed:4a:60:05:cb:fb:a3:61:15:3d:7d:e9:26:bd:46:6d:
42:08:03:3a:25:7f:1a:ab:bc:90:13:ee:69:95:ab:f6:96:94:
c2:87:89:d4:88:db:48:ee:5c:d8:ce:b6:eb:93:47:45:08:a1:
50:31:ad:3d:0f:87:4f:0b:79:1f:69:36:33:32:35:53:81:8e:
27:0a:ca:65:41:07:05:3c:63:4b:17:b5:58:20:c5:48:9b:95:
93:85:9e:21:9a:0d:90:a3:f5:ec:25:20:3b:c3:9c:47:1b:ec:
b7:dc:8f:2e:bd:0e:58:7d:79:28:f2:5c:84:86:82:5b:f3:e0:
88:1f:c3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:17 2025 by rpki-client