Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a9031ce-d4d1-3423-9ed7-a667f40ee946.roa
File: 1a9031ce-d4d1-3423-9ed7-a667f40ee946.roa (raw, json)
Hash identifier: YBSWfJuVKwU1GSu6951O+1DS7Hft/pJGv2DIU53KbLs=
Subject key identifier: F9:2E:E6:3B:F5:FB:4E:ED:07:17:61:3D:85:B4:3A:04:B8:62:08:3A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0BA20B65D2EE271D65AA7380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a9031ce-d4d1-3423-9ed7-a667f40ee946.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 44.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:a2:0b:65:d2:ee:27:1d:65:aa:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=f5a1fc0b-e06f-41a0-9971-4f9ddbccdbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:ee:50:83:87:be:51:6f:d7:66:68:a2:00:
bb:76:2e:2a:cd:02:e1:a9:b7:44:95:d7:bf:49:45:
3c:88:15:fa:3d:31:91:a7:2d:ec:57:40:d8:79:2b:
c9:66:f8:df:d5:09:83:35:69:72:9a:e6:df:e4:c7:
ac:15:d1:9f:26:92:3c:53:74:5a:f9:1f:85:6f:fa:
35:d2:3b:1e:dd:5e:98:e0:a0:ae:31:2d:32:3d:f1:
98:b8:f1:90:5d:82:df:8e:a3:57:d8:a6:9e:04:17:
4a:69:27:82:8b:6f:b2:c9:5c:fd:a4:32:34:97:fc:
b4:74:8e:b5:51:9c:8a:2d:08:2b:bc:cb:4c:cb:7e:
bd:95:c3:05:09:13:24:02:30:93:8b:6f:81:60:25:
71:80:3a:34:a2:07:c9:e7:9b:f6:77:dd:07:9e:e4:
b2:5d:fb:1b:05:20:87:fa:b7:c6:9f:35:3f:c4:29:
89:9e:a5:ce:cd:c4:25:68:c4:e7:b4:2b:8d:f4:36:
e2:ab:ff:f0:28:48:65:8d:cc:2f:33:fd:33:8c:b4:
c2:99:64:29:94:87:9d:5c:7b:43:28:65:57:d6:b8:
65:b7:f5:70:c5:cb:ba:10:de:da:0a:35:4c:70:e3:
11:ca:86:41:e5:54:57:dc:28:05:6f:38:b9:27:42:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:E6:3B:F5:FB:4E:ED:07:17:61:3D:85:B4:3A:04:B8:62:08:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a9031ce-d4d1-3423-9ed7-a667f40ee946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
44.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:c7:98:cb:be:70:15:4a:50:f8:78:bc:75:b0:aa:0c:59:20:
ff:54:2f:e1:d9:63:2b:59:a0:d2:06:9b:d5:bb:8c:33:c2:76:
74:ba:33:4c:4d:9b:df:25:9d:dd:2d:1e:99:2a:d4:ab:ca:5c:
a4:35:78:01:65:7d:4f:4c:8e:db:32:d1:8a:55:03:f7:2c:16:
9f:5f:f9:97:d0:32:ea:be:8e:fd:1f:e9:27:1e:bb:14:65:4e:
fc:17:99:62:e8:c8:2c:5f:b5:be:28:06:28:9e:26:b1:b3:c2:
cb:76:5f:4b:44:e0:28:58:13:2e:2d:75:e1:cc:a9:7a:ea:b0:
79:1d:31:72:b4:ab:23:c1:db:a1:86:22:31:cf:3e:3c:ef:5d:
8d:f1:15:b0:f0:62:19:41:8e:5c:c0:77:01:34:a0:1c:18:17:
30:b6:1d:90:c6:09:35:6a:85:a6:bd:5a:e8:78:6f:65:fa:bc:
0e:f2:3e:72:ec:2e:0e:1e:a3:9c:fb:e7:62:21:f2:3a:88:4e:
0d:fb:52:ca:0c:90:3d:52:96:fd:60:50:e8:49:d9:27:19:d0:
7f:bb:56:25:e2:43:15:cc:e1:3c:7e:ee:68:2b:d5:d0:62:6e:
df:3f:df:c0:d6:70:be:b8:de:e3:0c:d9:fc:fd:fa:6f:28:81:
81:15:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:50:40 2025 by rpki-client