Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f93d2d-ad37-35a5-8162-94b67cb75bef.roa
File: f3f93d2d-ad37-35a5-8162-94b67cb75bef.roa (raw, json)
Hash identifier: sV+sdwuOr6d5QqRxfqHX0/4FmPlK8BesoYCMSkb0ijw=
Subject key identifier: 0D:60:B0:44:90:57:54:F7:9B:8F:2A:FA:47:6A:AF:83:13:AA:3C:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1E5AFBDD9F68B886E6626600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f93d2d-ad37-35a5-8162-94b67cb75bef.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 138.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:5a:fb:dd:9f:68:b8:86:e6:62:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=e98fbfaa-7b69-43a6-b61d-d4afa042f9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:0f:eb:bd:f6:6d:11:74:95:da:f4:d0:01:
75:5d:41:ef:8e:29:55:45:3b:39:bc:05:e6:2f:fe:
25:d5:c3:cb:16:ec:b8:d1:6d:70:9a:e8:ba:9f:ca:
c9:75:cd:9b:b5:cd:77:c2:6f:ce:bd:49:7c:af:7a:
4a:0f:21:83:75:8f:cb:b1:f3:ab:0f:9e:2a:96:22:
b0:a4:3a:23:e5:12:f8:5a:3a:cc:ad:1b:87:5b:a5:
5c:f3:ef:e9:40:20:8b:74:e3:ee:38:18:be:52:78:
a9:e8:7d:27:2d:81:2a:2e:eb:56:4a:6a:a9:c9:44:
57:ca:0a:13:cb:1f:e2:28:6e:06:f8:4d:76:d8:89:
34:f9:ad:d2:c0:21:fe:6d:fd:63:3e:fe:e8:6e:66:
1c:49:54:71:be:38:c6:4f:ef:60:ec:e0:ea:e0:f1:
2c:03:d4:46:84:e4:c6:93:72:87:04:4e:48:7e:85:
61:2b:77:6d:4b:4e:c1:2e:af:c3:f9:79:77:79:d4:
f2:0a:b0:b8:79:4c:6a:c8:b3:55:66:b3:a8:bd:01:
89:9b:61:f0:d4:83:94:d3:2c:58:fb:52:21:b5:c7:
ff:40:ae:7c:97:ba:ee:ff:3b:05:0b:82:93:7d:b3:
95:06:e0:ab:e5:d4:fe:87:10:19:c8:43:a3:32:25:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:B0:44:90:57:54:F7:9B:8F:2A:FA:47:6A:AF:83:13:AA:3C:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3f93d2d-ad37-35a5-8162-94b67cb75bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:d4:11:e1:9a:7c:65:3b:d3:05:e3:7f:66:2a:f5:fe:11:52:
42:26:ef:a5:f7:54:d4:0d:6b:3c:ff:1a:35:02:f3:53:b4:07:
31:54:36:b0:5f:66:f7:28:61:bf:d9:51:9b:07:d8:f4:c4:23:
95:e2:ec:3a:0c:45:63:15:eb:6d:e9:a0:93:e9:3c:63:8a:6a:
e6:21:28:66:10:d7:9a:fc:a0:5a:f0:c7:23:70:cb:a8:b2:d1:
90:ba:fe:f7:3d:71:37:8e:64:a8:65:63:e4:31:b6:ac:bc:32:
47:9a:51:84:0b:fd:b4:28:52:15:30:8d:9e:a8:a2:3a:28:c8:
5f:b9:ad:40:2a:b8:cd:4d:8c:27:5b:7a:41:12:c6:02:e3:fd:
47:15:c2:ea:71:4c:45:be:f4:82:86:61:6c:77:e6:09:b8:eb:
29:67:5e:b5:c4:0d:0f:71:cc:31:4c:c9:cb:ec:02:d7:5e:d0:
8a:5f:8a:b0:94:46:2f:32:ff:01:27:b1:16:19:01:d2:12:b7:
87:38:09:b7:42:5d:95:30:f5:25:be:8a:59:b4:13:b2:85:6e:
e9:c5:89:95:91:db:45:57:2d:70:bc:67:63:8d:a3:93:1a:fe:
0b:dc:a2:b1:4c:c8:d6:ab:94:fc:ea:bb:08:f4:6c:03:a1:e0:
8b:97:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:36 2025 by rpki-client