Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecf4eee6-11b2-3f71-bc91-e6fa789e83f6.roa
File: ecf4eee6-11b2-3f71-bc91-e6fa789e83f6.roa (raw, json)
Hash identifier: D5ls44d7lBZ1mbZ/X9unwJSuFg2GHiCvktGf7ag4F8k=
Subject key identifier: 34:B3:99:89:AC:EA:D2:C7:B5:25:C3:05:9B:B4:40:29:1D:93:B6:06
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401F7B6ED1DC2CCC06E5ADBF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecf4eee6-11b2-3f71-bc91-e6fa789e83f6.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:7b:6e:d1:dc:2c:cc:06:e5:ad:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=6a16e2d8-46a3-4dd5-919c-fb64bbc3429e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:b5:8c:eb:39:6a:da:af:2e:b8:5f:b8:1d:
d9:d8:b2:ea:d5:16:f3:9f:f4:3d:a5:03:6c:f5:e6:
ea:56:7a:cf:fc:27:c7:37:f1:a2:e9:57:5e:3c:fa:
18:75:b2:58:0d:fa:65:30:f3:57:67:31:3b:38:16:
bb:15:d7:71:b8:b9:ff:7f:1e:93:3b:b0:09:ae:84:
6e:6b:4f:d1:05:67:3b:87:39:c2:27:28:ad:72:71:
53:2a:55:87:cb:ba:1d:78:c9:c0:ce:de:c8:ae:1d:
10:a7:fe:74:ec:6c:ff:5a:73:f6:48:a4:2b:f4:c3:
81:a7:7a:e0:3f:f4:fc:0d:ed:34:df:dc:07:4c:d5:
65:18:11:1c:61:52:2b:5b:b0:15:1e:6c:fe:6b:24:
84:9c:5e:d9:55:60:07:a9:54:ed:87:15:45:37:f6:
ca:9a:2f:89:01:6a:b4:19:2c:c2:fa:19:e9:05:75:
bc:43:9f:f6:04:4f:52:56:99:60:0a:94:1c:ce:54:
c6:70:94:f0:d5:11:54:11:ec:c9:5e:51:25:d3:b8:
12:71:4a:3d:f9:70:79:09:a3:af:be:2a:5b:24:32:
cd:7f:f9:9d:05:6c:4c:c2:05:31:aa:b1:d2:77:f7:
1b:06:db:16:20:98:32:cc:b4:c3:59:78:63:98:5d:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B3:99:89:AC:EA:D2:C7:B5:25:C3:05:9B:B4:40:29:1D:93:B6:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecf4eee6-11b2-3f71-bc91-e6fa789e83f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:e3:dc:96:84:f0:3e:5a:70:99:bf:cd:32:8c:90:34:fd:d6:
6d:bf:6c:17:c8:04:b2:f9:07:42:5a:bb:16:95:c7:10:39:0b:
77:3b:d8:18:09:c7:e2:f9:d9:bc:be:ba:2b:90:af:cb:0f:e7:
8b:2a:9c:d0:38:30:d7:1a:9a:f4:64:97:7e:a6:aa:88:1b:f2:
d4:73:6a:1f:c2:02:0b:33:e1:5b:be:21:bf:0e:57:6c:68:b5:
fd:3a:a1:54:77:e7:a2:c2:ab:8b:ee:41:d7:4b:71:0f:21:93:
9a:00:5d:88:37:ae:48:48:e0:65:67:96:cd:ed:ad:ac:a3:66:
ac:3d:69:76:40:1a:39:e3:ba:8a:58:8b:d2:fa:95:c6:10:09:
0f:c4:ab:b4:6e:d7:93:79:c3:00:56:d9:58:0b:4d:cd:c4:c2:
f7:9a:9b:53:0b:55:7d:84:3b:af:03:8a:68:01:93:63:bf:0e:
e7:27:32:1c:e3:4e:25:c8:14:cd:ad:85:12:51:21:d1:26:5b:
72:6f:b9:f0:09:63:de:ba:bb:7b:84:df:98:2e:61:7c:c1:90:
09:cb:e9:b5:3a:54:22:a7:eb:69:81:e8:03:9f:ca:3e:f0:45:
ab:ab:46:d6:7d:ec:bd:9b:62:52:9e:3c:1c:86:81:56:f9:af:
34:f3:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:24 2025 by rpki-client