Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfba605e-7544-35de-a5c1-1a2240d46c68.roa
File: dfba605e-7544-35de-a5c1-1a2240d46c68.roa (raw, json)
Hash identifier: ancIDIBrHQIBBKb8r8SmwrxGAnZPShLpjgS359ilpm0=
Subject key identifier: DA:40:22:D9:74:FD:63:09:49:6A:17:0A:3E:5E:B6:83:9A:AB:AC:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405C7E2E956A5D1B260E3A2A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfba605e-7544-35de-a5c1-1a2240d46c68.roa
Signing time: Sun 25 Dec 2022 12:00:00 +0000
ROA not before: Sun 25 Dec 2022 12:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 168.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5c:7e:2e:95:6a:5d:1b:26:0e:3a:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 25 12:00:00 2022 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=c3bde053-5ee5-4a1a-84c0-e31b03b1acf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:2d:b2:5c:a4:aa:84:55:f7:b6:b1:e0:5c:
19:28:87:eb:bd:17:bb:61:1e:c2:3a:ac:7b:da:42:
23:ac:86:75:cf:ad:0b:60:36:20:95:ac:31:fc:2d:
f6:9c:90:dc:83:b8:ea:da:12:1c:51:30:1e:6d:b5:
2e:7a:38:18:d7:41:48:22:76:95:fe:0b:83:e1:d7:
aa:66:18:c3:cc:02:90:42:2f:8a:79:29:b8:42:a0:
7b:a7:f9:f9:8e:64:34:d5:65:8d:7b:0b:11:38:ff:
ea:0e:f4:bb:0d:93:f1:e1:66:25:ce:18:b7:4d:3a:
32:90:c7:b9:0d:67:b8:a6:bd:e3:b8:83:9a:60:47:
c4:f2:1c:44:b0:89:45:c4:4f:bb:9d:38:71:03:e1:
72:7e:8a:c4:aa:ad:4c:b2:3e:c3:a2:f3:ff:08:cc:
a7:00:8a:ae:14:04:0c:0c:51:eb:9f:2d:92:70:89:
d4:c4:0c:8c:ce:7c:c9:1a:cb:1e:39:5c:d3:e4:f7:
03:43:9e:6c:ca:c7:72:92:b1:0b:84:06:13:14:c3:
6e:ae:52:1b:ef:11:50:b2:26:07:f0:12:99:4e:73:
cb:4e:99:f3:bb:17:93:bc:aa:9a:a4:84:90:84:8b:
4e:d9:15:f5:9e:5f:b3:23:f0:16:b1:41:4d:13:4a:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:22:D9:74:FD:63:09:49:6A:17:0A:3E:5E:B6:83:9A:AB:AC:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfba605e-7544-35de-a5c1-1a2240d46c68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:8d:d3:9e:82:f4:4d:2d:3f:06:69:2b:b5:74:0c:d0:ea:71:
85:e3:7a:75:36:57:94:eb:00:88:0c:be:a0:9b:35:46:ec:cd:
e2:6a:cf:c4:aa:48:09:87:cc:87:73:f9:7c:7a:44:b4:e6:2d:
d7:15:24:d7:17:be:4c:75:af:4c:c2:53:93:55:83:10:dc:48:
d5:e1:7e:d9:ef:89:89:08:cf:43:f1:83:24:59:41:83:77:71:
41:4d:57:26:e7:22:8d:10:3c:8f:d5:5f:b6:6d:37:15:51:24:
7e:7d:0c:25:2f:2a:43:17:a2:49:79:a4:29:df:b2:ba:a8:8c:
38:c0:0c:b8:2b:2c:65:f5:60:e8:91:29:64:b1:15:81:be:cb:
2c:1a:10:fd:ed:5f:ef:d8:85:23:9a:85:4d:f0:1b:f7:d0:33:
6e:c7:dc:38:38:52:86:33:1d:8b:46:f7:3c:c5:e6:1c:a5:ff:
d5:6c:1a:1c:64:6d:57:cf:67:63:a3:4a:6b:e7:64:ba:d0:91:
8f:49:64:bc:b6:b5:67:59:68:37:78:ea:4c:de:fa:2e:06:56:
5f:03:cb:d9:29:40:7a:d3:5a:f0:ea:8e:02:a9:43:a8:f8:32:
dd:15:1e:b1:11:ae:55:eb:89:c3:58:3a:ad:26:93:e4:c2:43:
02:cb:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:18 2025 by rpki-client