Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e90f4dff-f139-3567-b1c6-ac60eaa7ecb7.roa
File: e90f4dff-f139-3567-b1c6-ac60eaa7ecb7.roa (raw, json)
Hash identifier: fHew6a29JoB6lDw7ROPv3RXkBapf68RcHIMVU3DYj2Y=
Subject key identifier: 52:3F:59:1A:13:B6:2A:BA:63:E4:8E:46:BC:70:82:C3:AB:15:6E:2A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840217569CC4CBC53509D54AE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e90f4dff-f139-3567-b1c6-ac60eaa7ecb7.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Mon 09 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 160.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:21:75:69:cc:4c:bc:53:50:9d:54:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Jan 9 05:00:00 2023 GMT
Subject: CN=0958ab6f-dd4c-4709-a459-e0c0094dcb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5e:0f:ed:90:40:86:23:44:a6:fd:96:8d:2c:
c6:2d:67:20:84:68:87:d1:b5:b6:e9:5a:cc:a7:b2:
56:32:c9:bf:81:68:20:3e:d2:b8:78:66:dd:cf:01:
56:10:a0:c1:1a:83:fa:e3:36:aa:5a:7f:7a:a4:f3:
00:60:61:c4:42:c8:dd:3e:a8:a8:2d:8e:5c:0b:40:
c8:82:0c:bb:98:d5:96:2b:12:0e:9d:dd:33:85:3a:
a3:d5:b6:05:67:7d:a9:2e:78:0e:e9:7c:60:b6:80:
45:7e:7d:80:7e:83:b0:32:43:42:9b:18:68:e2:c9:
16:8b:a2:e6:d4:1e:a1:b2:f6:c6:db:c6:ca:74:49:
bb:57:78:6d:f3:04:e2:d4:15:02:b6:d7:22:b5:ce:
48:e8:63:60:d6:1c:1c:29:5b:46:fe:2c:69:2e:f0:
94:1d:54:cb:14:22:3e:81:e5:07:38:c9:40:7b:03:
f7:ea:be:1b:89:f9:bd:a7:7d:56:97:b4:71:80:cb:
0e:7e:ec:ca:75:36:fd:b5:30:a9:ac:19:0e:c5:9c:
6a:1a:eb:c8:ed:bf:8b:b5:5b:25:f3:81:89:87:3a:
e3:ae:d2:f9:23:18:23:46:7b:c9:2a:b7:0b:59:39:
2c:0b:23:7e:7b:86:13:11:34:09:e4:72:02:f8:07:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:59:1A:13:B6:2A:BA:63:E4:8E:46:BC:70:82:C3:AB:15:6E:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e90f4dff-f139-3567-b1c6-ac60eaa7ecb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:34:1c:29:86:d9:8d:08:3b:f0:40:14:19:aa:09:41:32:93:
9a:9a:23:c3:74:af:b2:d1:f7:03:2c:11:6a:cb:d0:9f:85:81:
2e:e0:8d:28:9e:91:5d:87:b2:00:3e:68:a3:8d:23:1e:95:b3:
cc:97:dd:6d:bf:e4:c1:6f:4e:2d:3b:65:18:e9:30:9d:4f:eb:
00:c4:cc:fb:56:ec:88:45:a9:5e:fd:34:64:d5:a5:82:cb:d2:
11:bd:98:da:ad:f6:04:40:79:4a:39:0f:47:0f:89:4d:e5:72:
c3:4c:27:fd:3d:8e:01:56:24:8b:8f:d2:40:db:35:aa:7e:77:
ce:b6:f5:0a:91:98:39:91:ad:75:fc:b4:fe:5f:49:ac:f1:77:
fa:06:b4:f4:a4:81:98:f3:2a:82:15:e5:bb:80:54:48:fd:be:
19:56:33:35:c7:4e:af:83:fc:cc:fa:eb:80:8b:60:f5:d9:80:
e4:0f:ac:f2:53:33:8b:9d:d1:e7:b8:93:74:c2:dd:3b:17:97:
24:ad:0d:58:ea:24:63:36:1c:b4:cc:72:c9:e9:a8:da:da:fd:
b3:2d:c3:92:50:f9:e2:eb:0b:07:af:90:d5:0e:d0:21:87:91:
3e:82:df:4d:fb:dc:ec:16:ad:62:9a:46:ec:94:b9:f4:7d:fe:
6d:8d:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:00 2025 by rpki-client