Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e92f6b2d-6b38-3e15-9421-c64c0caa9af4.roa
File: e92f6b2d-6b38-3e15-9421-c64c0caa9af4.roa (raw, json)
Hash identifier: EXHYy7BhEij5LThj3geR6zQNGMZXRFrl/kHN5LRQem0=
Subject key identifier: 38:E5:1A:FB:25:C2:AE:FA:BC:19:ED:E4:A1:75:49:65:F2:36:27:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D18EBFEC5E836EBD40D029F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e92f6b2d-6b38-3e15-9421-c64c0caa9af4.roa
Signing time: Wed 02 Mar 2022 05:00:00 +0000
ROA not before: Wed 02 Mar 2022 05:00:00 +0000
ROA not after: Wed 06 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 143.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:18:eb:fe:c5:e8:36:eb:d4:0d:02:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 2 05:00:00 2022 GMT
Not After : Apr 6 04:00:00 2022 GMT
Subject: CN=df7ce8f0-67ab-47cb-9c2b-b3b6a483dafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:b0:d4:23:62:2a:77:e1:a4:ed:27:55:fc:
d8:d7:81:b8:96:41:76:dc:6b:d4:70:e6:18:6c:35:
80:48:34:e1:ac:11:cd:cc:0a:d8:c5:65:e6:03:ca:
e0:f1:8b:bd:5d:cc:9a:1d:f0:75:29:c9:2e:3d:47:
c2:4a:d0:07:00:c0:cd:88:4c:1f:49:31:4a:5f:ee:
8c:15:f2:f5:ed:1a:15:b2:e9:a6:30:63:3d:4e:5d:
0a:51:ea:f7:1c:dd:c2:a3:44:9e:6e:cf:dd:cd:cc:
91:93:b2:10:02:c0:0a:91:e0:88:8f:79:7c:cd:83:
3c:db:51:f6:94:87:bb:a0:3c:1f:2c:74:e7:e3:f1:
6d:d3:54:f2:0b:a2:3b:7c:21:b2:6b:8d:ae:26:ae:
6c:a1:73:7d:0f:d9:18:8e:39:8f:a9:f4:cf:6d:2a:
94:ca:d3:77:ff:8e:83:b9:f9:e7:6a:84:9f:c0:7c:
47:b7:f4:39:5d:25:2c:e7:bc:55:da:d8:8b:be:9d:
b9:52:ef:dc:c2:93:92:4a:a9:43:c1:65:e5:01:b1:
ad:6b:b1:81:34:41:d9:d4:cd:18:be:47:b3:ae:b5:
81:59:18:30:76:2f:ad:85:65:c4:0d:00:2f:a1:9a:
68:b4:e4:ec:c9:f8:b5:38:c4:3f:cf:37:74:0a:3c:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:1A:FB:25:C2:AE:FA:BC:19:ED:E4:A1:75:49:65:F2:36:27:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e92f6b2d-6b38-3e15-9421-c64c0caa9af4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:bb:d1:a2:a1:84:a2:7f:35:da:43:2d:fd:f4:64:14:e1:60:
52:1a:43:32:ce:c7:0f:8c:bf:a8:ad:bb:10:7a:48:62:4d:79:
4d:bd:9e:23:44:ef:bc:35:57:50:1f:fa:51:a4:5c:30:09:52:
e1:1d:19:a4:78:e4:04:0f:4d:b7:35:fd:7c:fa:ff:4d:a6:8b:
09:72:76:ab:41:4d:62:cf:fe:f0:5e:2d:00:9d:4f:2c:d5:51:
f8:26:24:72:40:03:0c:66:02:ed:b8:25:3d:f3:a3:9f:15:9b:
ec:28:d0:ad:11:bd:5a:70:0e:29:2c:75:70:20:c6:ba:59:72:
2f:21:4d:71:16:60:77:e8:59:e3:ac:22:43:b0:89:70:9e:81:
e9:61:95:f4:49:86:82:66:b8:76:60:96:c7:ba:7e:7f:d6:f7:
a0:25:dc:fe:26:4f:41:42:19:40:21:f1:12:52:d3:73:3d:3e:
06:d7:9d:19:a0:9c:42:79:b8:31:a4:df:42:b6:65:4a:67:30:
b2:8f:77:ab:9b:11:3f:4b:aa:97:17:c7:67:8d:0b:40:7c:80:
15:eb:7d:1e:22:4e:71:7f:83:b7:3d:b5:f1:ee:2a:6b:f7:ab:
73:03:f5:fa:fb:35:72:55:cf:7a:08:fe:19:a7:ee:c9:21:60:
0d:b9:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:38 2025 by rpki-client