Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f14817a1-b65a-3bc5-a367-3d6eb64d2a74.roa
File: f14817a1-b65a-3bc5-a367-3d6eb64d2a74.roa (raw, json)
Hash identifier: AnNQkDvU259kQYPjfmygWfqYqUAb4ImNSgn1z/Fy9zo=
Subject key identifier: 50:1A:21:44:EA:40:D1:8A:C7:E5:38:F1:C6:7A:5A:59:6A:5D:E1:C2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D9EBFFA492B618D7439DEBAC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f14817a1-b65a-3bc5-a367-3d6eb64d2a74.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 24 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 143.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:9e:bf:fa:49:2b:61:8d:74:39:de:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : May 24 04:00:00 2022 GMT
Subject: CN=7ec841e9-5b76-402b-a059-211707071fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:18:35:fd:33:d1:f4:2d:85:e8:36:e8:93:
1f:fa:13:ec:80:91:0f:da:ea:74:c5:af:61:e5:e5:
90:8d:74:ac:5b:3e:8c:77:14:b9:5c:ff:6b:7d:be:
2a:f4:5f:29:e2:3b:e8:e7:a8:eb:f9:23:eb:c7:65:
5b:6f:52:9b:6e:40:54:56:6d:69:55:eb:93:97:3e:
e2:de:4a:3f:2f:da:9d:37:2b:29:01:72:7c:f2:35:
9e:14:ba:a7:e8:ca:c5:92:e5:4e:27:e4:77:78:6d:
41:b6:26:f7:ee:03:ef:f9:c7:d4:6a:01:33:e0:b5:
79:f2:26:a1:b7:89:6a:f5:39:4f:db:e9:8a:72:ec:
7f:d2:5d:1f:75:bd:bb:40:25:c1:2a:1b:2f:68:39:
46:8d:a1:c7:f4:02:dd:d4:8d:e4:9c:4d:31:81:6b:
b4:e3:01:c2:c2:fb:b2:d8:58:80:f0:a3:8f:6a:30:
d7:81:f4:e5:cb:68:f1:2c:94:03:74:49:94:45:5f:
17:ab:7d:34:cc:18:fd:45:69:85:5e:ae:e9:ca:b4:
66:ee:b2:f0:c3:61:ab:8e:75:7e:18:e7:76:22:1d:
e3:5e:84:98:eb:e7:df:0a:51:22:14:af:8b:cb:56:
3a:c4:78:68:04:38:9e:94:e5:9d:b7:7f:18:72:c6:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1A:21:44:EA:40:D1:8A:C7:E5:38:F1:C6:7A:5A:59:6A:5D:E1:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f14817a1-b65a-3bc5-a367-3d6eb64d2a74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
143.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:9b:6a:63:1d:27:94:d5:e5:b6:95:3e:44:78:ba:ba:57:2a:
64:57:e8:7f:ef:26:52:29:41:ef:3f:00:72:eb:39:bd:a9:54:
f2:5c:a7:4c:4e:c5:50:ac:1f:b0:10:f3:f5:64:20:e8:c9:57:
b9:ff:3c:ac:65:9c:c3:e8:cf:1f:b9:c0:d9:ce:d2:37:a6:44:
ad:8c:b7:fd:38:a3:e9:cd:13:88:cf:03:81:a4:64:26:32:57:
cf:48:42:f7:0c:1c:ab:02:ae:c3:fc:b2:1b:2f:eb:8c:18:54:
ef:ca:14:a5:79:ad:44:f8:fd:f8:84:c8:3e:85:fb:3c:b8:0f:
30:79:b2:32:4e:68:a0:42:82:43:f2:81:e7:ec:77:74:f4:15:
4b:fa:85:b9:e4:43:56:2b:2e:64:14:fb:c4:c1:ee:44:a4:3d:
2b:9e:b2:01:80:4e:fd:a4:23:a6:37:2b:71:71:02:97:da:c5:
20:72:a0:25:f9:f3:23:b1:ac:65:de:89:bb:4b:08:47:df:be:
aa:4e:50:81:93:a3:1f:03:cc:0b:be:ac:1e:84:60:85:b0:f2:
91:79:1c:f9:71:e3:e3:29:85:ca:98:4e:8b:b7:87:3f:dd:82:
ce:68:96:8a:0b:95:5a:7f:01:02:2c:9b:d2:f1:8d:02:59:e0:
7a:d6:db:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:46 2025 by rpki-client