Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df94786d-54ed-35d1-84d0-0cb58179e991.roa
File: df94786d-54ed-35d1-84d0-0cb58179e991.roa (raw, json)
Hash identifier: v/pyaeNSbHL51PJe28EPXZbI4/8Jb1B3w9D5/g4VHL4=
Subject key identifier: B4:C4:0E:88:7F:72:73:A9:07:3E:6F:28:76:F3:FA:9A:B1:7C:5A:99
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F639F25D85D8E1878BA9F9600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df94786d-54ed-35d1-84d0-0cb58179e991.roa
Signing time: Tue 27 Sep 2022 17:27:07 +0000
ROA not before: Tue 27 Sep 2022 17:27:07 +0000
ROA not after: Wed 02 Nov 2022 04:00:00 +0000
asID: 8987
IP address blocks: 152.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:63:9f:25:d8:5d:8e:18:78:ba:9f:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 27 17:27:07 2022 GMT
Not After : Nov 2 04:00:00 2022 GMT
Subject: CN=b8c3043a-de12-44b3-9b1f-c94a5612d613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:8d:19:5e:ad:af:6d:5d:c9:81:c5:9a:4c:
40:ef:1a:b1:71:99:e9:a9:87:7e:06:ab:ee:4a:51:
34:d7:1f:45:b8:9c:11:7f:23:72:eb:48:2e:99:bd:
64:cd:be:e7:44:f6:f3:7b:2f:13:9e:32:85:a5:cc:
f8:3d:be:dc:db:b4:e1:93:32:aa:df:76:7c:6e:f6:
43:13:32:fe:91:2b:be:2d:41:67:81:1c:47:0a:41:
a8:9f:80:aa:51:2c:48:f8:f8:9b:b3:55:8f:1b:61:
ed:65:d4:87:ee:e2:d1:e1:67:fc:cd:38:97:ca:f6:
88:64:23:11:b6:18:57:40:87:f7:f3:b0:eb:28:76:
1e:91:8b:0d:00:1a:48:01:9b:e2:7e:29:b3:7d:0b:
82:fc:80:33:e8:8f:17:0b:d6:0c:1d:85:4e:51:de:
15:fa:c3:48:77:f0:6c:7b:79:53:6d:84:cb:6e:08:
b8:39:36:b1:61:9a:ad:2b:0a:ad:9c:d1:68:53:09:
94:9f:39:67:7c:b0:43:42:97:f3:db:92:de:90:f0:
a8:81:7a:d4:7f:d2:de:3c:4a:5b:9b:a0:eb:00:10:
f0:06:2e:a0:95:c1:d3:57:bf:4f:6d:47:1a:30:37:
90:4f:d9:af:cc:bb:48:fd:00:9b:68:67:f9:bf:4b:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C4:0E:88:7F:72:73:A9:07:3E:6F:28:76:F3:FA:9A:B1:7C:5A:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df94786d-54ed-35d1-84d0-0cb58179e991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:73:a8:e5:2d:f9:f2:01:77:7e:e3:ba:18:f1:13:fd:d4:07:
03:84:f3:28:c0:52:92:33:f1:c0:d2:48:5b:5f:95:95:a9:45:
b1:93:40:e9:81:1b:96:8d:fc:4a:be:50:19:7a:61:a8:1b:49:
b4:7a:47:76:a0:3b:54:a8:fe:be:35:4d:de:e9:22:c0:a9:57:
2f:49:d6:12:cb:a1:2f:2f:bf:ee:4c:33:2a:c5:dd:13:1e:73:
8f:b2:d9:48:38:a6:00:2f:cc:11:a8:6e:d5:9f:f4:fa:c1:8b:
58:e3:23:9f:3d:bf:20:f1:72:d4:72:ce:f2:6a:d7:32:2d:02:
a6:ca:4e:3f:ed:dd:dd:e4:81:b4:22:4e:2e:35:6d:8f:7b:c8:
ae:2c:1f:53:ca:53:f3:29:c7:aa:01:26:4d:9f:e2:70:c7:3d:
e4:61:02:42:b1:d0:28:c2:9f:90:8e:d6:b6:47:5d:21:a5:ec:
7f:eb:57:73:8e:7f:50:19:75:32:9b:c9:89:62:4f:83:e0:6f:
da:9c:43:a5:a5:e4:bf:a1:7f:ce:5a:1d:74:52:74:97:4d:a2:
65:d2:be:1e:96:60:6b:8a:0d:f6:10:f5:bf:50:f9:ea:24:3c:
38:07:57:18:a2:cd:a2:65:c1:cb:39:58:90:b2:57:9e:b5:b4:
d7:0b:71:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:08 2025 by rpki-client