Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d48fb89-e2f8-32a0-bd2d-a49513b812e8.roa
File: 0d48fb89-e2f8-32a0-bd2d-a49513b812e8.roa (raw, json)
Hash identifier: 2DYkcfh0CvbgtlMzCxEy7Xf3fM6xKDqduxqxjHYgg8c=
Subject key identifier: E7:BE:81:AD:F8:AA:72:22:8C:65:DF:64:02:99:45:3D:69:A8:E5:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840391F397F3A0B4ED9E6599D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d48fb89-e2f8-32a0-bd2d-a49513b812e8.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 32.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:39:1f:39:7f:3a:0b:4e:d9:e6:59:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=c8212f12-5c13-4428-be2e-9c71414d211d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:a2:43:2d:78:d9:95:bf:da:f8:31:9f:2e:
4d:a7:33:df:1d:96:bb:2c:10:cf:d3:ed:c7:cc:1e:
1d:1a:0b:d7:99:58:33:14:67:fa:7a:5e:ed:39:71:
fc:c2:bc:0f:fd:ef:99:83:b0:3f:87:74:ce:2b:0b:
df:f6:2b:58:cd:80:5d:e3:83:c3:3a:2f:64:bb:94:
33:da:d0:34:86:df:11:8c:6f:8f:85:a6:34:f4:ea:
8f:0f:c3:b4:78:83:0a:9d:5d:b7:79:8c:4f:e8:d3:
e4:af:51:35:e1:5c:e8:7f:83:f1:53:75:51:92:c6:
43:1c:aa:8a:5e:72:ea:a1:70:0e:49:45:6d:57:5c:
8e:0b:df:79:99:7d:20:42:5a:62:29:b3:dd:66:c0:
8f:06:54:03:8a:73:7d:1b:d6:9e:66:48:f7:ed:84:
56:36:e9:15:7e:7e:a6:f0:1b:8b:b3:e5:ed:46:c7:
5c:05:19:bc:24:4c:bc:61:8e:da:99:91:35:27:bd:
b8:49:c9:dd:08:97:fe:2c:42:a2:ad:96:b0:64:96:
a1:da:79:ec:68:58:bf:11:ef:07:57:9e:0f:70:51:
99:ee:71:af:fb:cf:56:22:14:6b:66:f7:6d:f3:50:
c9:ea:1f:c3:0c:f4:0f:5c:46:44:69:b3:a9:4d:4a:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BE:81:AD:F8:AA:72:22:8C:65:DF:64:02:99:45:3D:69:A8:E5:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d48fb89-e2f8-32a0-bd2d-a49513b812e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:41:03:d8:cb:93:a4:e4:da:24:17:83:c8:c4:1e:ec:63:db:
4b:44:ae:c6:ad:c3:09:23:53:89:75:83:34:71:d9:5a:41:13:
00:5b:9f:b1:ed:9e:a2:34:fb:84:3a:b7:c6:a1:b6:f8:50:1e:
e0:20:18:af:58:be:4e:87:bd:7f:e7:21:8a:e5:f9:a5:ce:44:
9c:80:04:59:2b:59:94:13:24:49:a6:ad:53:1d:f9:de:c4:ed:
ae:c5:48:53:e6:03:c1:49:f3:16:ca:c6:2f:ff:97:53:f4:d8:
f7:15:91:ea:b6:2b:01:e8:04:06:9d:63:d5:57:80:b4:8f:a6:
26:d6:52:74:66:27:6c:2f:bf:09:3e:a7:db:d3:26:85:c6:86:
5e:3e:82:82:33:1d:2b:bb:34:04:cd:04:42:54:9f:d5:b8:31:
f0:1f:16:e4:dc:25:43:5d:fa:7a:e0:ee:93:c5:fd:fb:b7:7a:
e4:67:23:7a:83:a2:85:78:a8:b6:6f:bd:35:c2:48:4a:c7:17:
60:55:52:5d:7c:8b:0f:68:2e:be:47:b4:a0:48:13:7d:14:7c:
29:37:b2:e3:53:a0:ac:8a:5a:69:9b:1a:82:6d:7a:fa:79:fb:
88:87:e6:38:5f:7e:73:55:f9:bf:d8:49:17:7f:91:e1:5d:69:
b8:ad:28:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:42 2025 by rpki-client