Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1066c289-f732-3068-863d-263e0b4b1129.roa
File: 1066c289-f732-3068-863d-263e0b4b1129.roa (raw, json)
Hash identifier: 2rjQeLeQzFQuJbPlA5AM/Fjk+zP++RyCUFWnxKsYX3s=
Subject key identifier: 37:32:D3:5F:CF:02:7B:A8:17:3F:DC:FA:96:1A:61:06:34:2D:99:AA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401B172745FD372A195767E380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1066c289-f732-3068-863d-263e0b4b1129.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:17:27:45:fd:37:2a:19:57:67:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=7daab18d-fd02-4229-a9c0-94f259565eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:2d:3e:6b:30:b8:0f:b0:1e:7c:a1:72:98:
91:e6:20:13:17:00:9d:bd:95:01:08:c4:00:2b:0e:
73:7a:2c:a3:25:98:e2:2e:bf:f7:6f:3b:b1:2e:4b:
52:5a:99:e3:f6:69:8b:12:27:66:93:26:c4:44:68:
62:fb:4e:cf:5f:da:a2:24:59:3a:4d:66:87:da:5a:
95:7d:d9:9f:4f:5a:75:d7:17:91:37:e6:7e:10:e4:
62:bc:78:ab:5b:09:7a:7e:95:77:16:94:34:e8:21:
65:8f:14:50:6f:74:14:40:55:70:23:36:a6:87:c6:
8a:74:34:d5:f7:12:c0:af:6d:74:05:25:61:7d:34:
18:79:ca:6e:12:98:c1:38:c3:d7:79:83:0a:fe:c7:
0a:bf:85:83:1b:e3:32:7c:42:c9:2b:51:4b:86:d0:
8e:8c:61:4b:04:f4:88:64:02:eb:63:86:09:ad:9a:
0e:bc:0c:fc:51:84:e6:ac:0b:1e:6c:13:47:71:94:
05:3c:8b:b9:6b:b8:7b:c2:80:8e:8c:b6:aa:96:d5:
fe:15:6c:99:47:81:58:fd:e7:6c:b2:49:91:4a:ab:
56:7a:6e:51:1a:e1:69:5e:b5:57:f7:35:f5:2b:31:
18:71:ec:ce:9d:de:5f:69:e0:ae:5d:61:5f:9a:0c:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:32:D3:5F:CF:02:7B:A8:17:3F:DC:FA:96:1A:61:06:34:2D:99:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1066c289-f732-3068-863d-263e0b4b1129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:09:aa:83:d5:49:d6:ca:0a:26:e4:61:54:4c:5e:c8:04:a9:
0f:f7:0a:84:cf:87:3d:43:29:da:ec:4d:ad:60:27:d7:04:1b:
e0:73:88:f8:8f:10:d2:00:3f:40:6a:c3:40:a4:a4:d7:f5:cc:
6a:97:07:fd:4e:af:dd:fb:20:de:32:e7:6f:45:da:4a:57:f7:
d8:21:7b:6e:1e:08:2f:6b:e1:4c:5a:61:c5:71:4f:e3:9b:f2:
59:70:b0:72:bc:5a:43:16:d4:ac:e3:b6:aa:2d:2a:c1:9b:14:
b0:98:25:b9:11:e6:eb:d6:bd:98:9e:a6:46:8c:b1:35:90:4b:
42:8a:47:66:42:b7:7e:9b:f5:5f:0d:af:c5:27:7f:66:e9:26:
8d:14:5f:35:8f:ec:0d:a8:a1:e4:af:88:93:49:cd:dc:c5:ed:
9f:a2:55:3f:e5:ec:67:9d:e5:e9:07:a3:22:86:57:e2:3a:c8:
1a:10:80:17:4d:b4:41:2a:e3:08:2b:92:a3:98:d6:4d:ed:8f:
42:6a:2b:7b:49:e4:a2:75:1b:3c:0f:e4:75:e7:79:b9:13:79:
e4:09:2d:bb:4b:62:51:e6:6d:da:cd:50:79:e9:15:46:bd:a5:
12:67:58:dd:f9:55:09:60:bc:4e:28:b3:49:c0:31:9e:62:f0:
60:8e:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:57 2025 by rpki-client