Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d6f33ca-3073-3a84-8cc0-b4613c38ea32.roa
File: 1d6f33ca-3073-3a84-8cc0-b4613c38ea32.roa (raw, json)
Hash identifier: Piqlg2QnbOEQSj8uglJ66WrNVdBRNCJ2E50D/98CX6g=
Subject key identifier: FD:2C:17:80:6B:62:4B:CD:A5:97:AD:9C:AC:17:6A:9E:0E:6B:3D:9D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F852E0B3579D326998B11E000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d6f33ca-3073-3a84-8cc0-b4613c38ea32.roa
Signing time: Sun 09 Oct 2022 12:00:00 +0000
ROA not before: Sun 09 Oct 2022 12:00:00 +0000
ROA not after: Mon 14 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 192.31.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:85:2e:0b:35:79:d3:26:99:8b:11:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 9 12:00:00 2022 GMT
Not After : Nov 14 05:00:00 2022 GMT
Subject: CN=110b95ee-424c-4250-8298-8ea4896c168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:66:fe:5e:1a:d6:92:56:e0:a2:a6:f4:37:
20:e8:35:65:a6:34:80:d1:fd:48:e7:eb:b0:32:dc:
f7:02:6f:82:f1:8d:e4:20:56:86:f3:c1:c9:4b:97:
d4:b2:6d:05:60:68:ae:09:f1:00:cd:60:2a:f1:80:
db:1a:3b:3e:08:3b:c8:f6:2b:50:d7:7a:78:94:a6:
5d:52:ab:b7:e6:5c:13:b6:8b:cb:0c:9f:4a:0f:1d:
d9:c1:8a:ba:37:b6:04:0f:21:ad:53:ef:47:46:a9:
57:b7:5f:c8:48:bf:a0:22:2b:71:50:70:f9:e6:8d:
bc:23:dd:c0:76:12:7d:85:ae:37:35:79:3a:ae:ad:
0f:cf:62:f8:8c:01:3e:14:1d:14:d4:28:49:6a:02:
54:21:d8:2a:ed:ae:66:f3:1c:a3:f6:c0:90:22:d8:
eb:d9:be:e3:5e:d1:46:91:38:bd:ef:ff:00:34:3a:
5b:64:cb:73:5d:70:5b:c9:0c:9a:34:0a:98:85:5d:
88:c2:8b:f3:27:40:cc:5e:57:6b:70:ee:3a:ca:4b:
f0:a5:62:d6:46:2c:12:62:c1:43:0b:ed:bb:c7:81:
f5:ee:60:93:1c:12:ab:61:8e:f5:2e:c0:0f:12:37:
29:77:af:e1:70:db:83:96:fc:0d:83:0e:4b:1e:5f:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2C:17:80:6B:62:4B:CD:A5:97:AD:9C:AC:17:6A:9E:0E:6B:3D:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d6f33ca-3073-3a84-8cc0-b4613c38ea32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:be:96:83:32:0e:5d:d7:90:4e:81:8e:7e:c5:d9:74:ca:ad:
c0:84:7e:d3:3a:1a:d7:29:6c:13:a1:08:3e:dc:88:27:37:5b:
5f:0c:f5:8a:42:de:4b:e5:fa:bc:26:96:cb:96:6e:cd:8e:f6:
b8:75:0c:a6:1a:e2:f1:29:23:8e:9b:17:e4:7f:9c:f8:d1:43:
3b:fc:cb:61:63:fb:6f:65:45:74:c1:6d:be:11:d6:83:af:99:
a9:ed:e7:9e:6a:1a:eb:b3:f0:a3:91:7c:7b:40:3c:fb:76:be:
68:23:83:c3:e9:30:30:4b:49:68:2c:89:c8:b6:f6:1f:85:91:
a9:b6:7b:51:20:df:61:64:64:b4:83:3e:7d:fa:1b:7b:d2:aa:
e5:07:ac:06:88:13:c0:fa:f1:f3:bb:9e:1f:e2:ed:f2:be:c1:
93:20:e6:4d:6e:a6:70:33:3a:4a:f2:07:c7:b4:f7:91:17:7f:
d7:4c:8d:70:cd:f4:f3:8e:27:28:a4:4e:c8:03:96:b0:4a:f2:
f9:5f:32:a2:cd:39:18:3f:e5:e4:f6:7c:ee:b9:76:84:40:5e:
25:96:21:a5:14:b6:1b:79:96:ad:01:dc:ec:c7:57:fd:a6:f5:
57:da:30:0c:60:d8:3a:2d:e8:fe:f3:16:b8:ab:88:6a:f7:b4:
ce:3f:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:27 2025 by rpki-client