Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1cab307-7526-3f68-a121-5ccf2792888a.roa
File: f1cab307-7526-3f68-a121-5ccf2792888a.roa (raw, json)
Hash identifier: lglDQYfod3DRuRGOcZoA9ChZetl2AfH54KDFH1OZ0Qs=
Subject key identifier: 4A:4F:33:81:BD:D3:6A:E8:E6:9B:FC:C4:1B:40:DA:FA:61:84:CE:E0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584008300894D92D89F7199B8F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1cab307-7526-3f68-a121-5ccf2792888a.roa
Signing time: Fri 25 Nov 2022 12:00:00 +0000
ROA not before: Fri 25 Nov 2022 12:00:00 +0000
ROA not after: Sat 31 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 149.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:08:30:08:94:d9:2d:89:f7:19:9b:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 25 12:00:00 2022 GMT
Not After : Dec 31 05:00:00 2022 GMT
Subject: CN=c5da7351-591c-4996-bd20-471658082708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:e5:52:24:4d:ab:c8:e3:41:6c:f3:e5:f2:
d6:09:f4:97:8d:0b:c9:71:90:82:c7:79:d7:79:2d:
e3:b4:d0:3c:8e:bd:0c:8f:7c:b6:e5:03:ff:90:95:
5f:f2:df:7d:cc:99:2b:11:ea:9e:00:84:d8:0b:59:
9a:3b:fd:9b:7e:84:5f:c1:ed:b6:f2:e0:87:d8:32:
7f:07:91:69:48:c5:c9:0b:cc:76:88:e4:c8:9c:32:
85:05:6d:68:45:2b:88:a9:1c:f7:84:72:82:8b:f7:
27:f4:1c:91:ae:b4:60:e2:7c:1a:a6:57:29:28:aa:
ac:6b:fb:37:08:46:c0:a5:52:d6:85:e7:4f:df:f7:
c1:d2:e5:b7:20:48:40:fc:56:1e:f8:43:38:86:70:
0f:77:19:d4:c9:d4:a5:d0:a0:1a:44:6e:43:ea:db:
e9:38:29:1c:58:b5:93:d4:81:0d:09:8f:60:f8:64:
1c:95:8a:d4:74:01:87:80:12:23:57:dd:56:a8:87:
db:44:ca:a7:ca:a9:7a:5f:6b:66:69:33:85:8b:d5:
4b:d3:23:98:b4:36:fb:59:e7:9d:78:03:da:d7:d2:
ac:46:cf:7d:a3:7a:16:76:70:72:f3:99:29:bd:99:
72:f4:7b:8a:5b:1d:ef:af:b3:e7:39:e4:4d:e0:12:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:33:81:BD:D3:6A:E8:E6:9B:FC:C4:1B:40:DA:FA:61:84:CE:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1cab307-7526-3f68-a121-5ccf2792888a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:2e:2f:e8:da:11:bd:51:ef:a6:42:fd:cf:47:9f:a6:db:0b:
a8:5e:5e:9d:91:44:60:6a:53:7f:ce:e1:b2:59:9e:77:22:de:
12:1a:e7:44:b9:bb:a0:7c:d9:01:d8:bb:20:ec:91:33:89:84:
68:55:33:14:85:c6:07:25:0f:9c:00:97:b1:cb:88:70:b5:65:
bf:e8:5b:a7:20:a0:69:ff:9c:eb:b6:1a:59:ba:63:d1:b0:3f:
2d:81:fd:3e:61:e4:d9:94:2f:01:3e:57:49:62:bd:81:06:69:
92:c4:a8:5f:61:66:6d:b2:ac:76:82:91:19:9d:13:a1:d7:81:
00:ba:7d:e3:f1:b7:2f:c4:6e:57:4a:de:99:b9:5b:ff:c0:5d:
59:81:33:9c:11:ad:d3:1d:55:36:00:80:b9:cf:60:66:27:61:
25:dd:52:22:37:66:c3:67:b7:00:4b:f9:d5:96:c6:4f:19:a8:
5a:51:31:4d:e1:f8:44:e8:b3:09:c2:c1:d1:d9:99:db:5b:ce:
3f:25:7e:27:b5:3b:3c:83:d8:66:65:ea:ac:83:98:2f:9c:cb:
95:c9:8a:23:d9:a5:46:c5:1c:9f:80:ce:1d:f2:0d:56:b3:87:
6e:ec:fa:c0:25:58:48:4d:52:de:88:a5:81:61:02:dd:86:2b:
3d:4c:2f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:07 2025 by rpki-client