Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f622ac3-beb4-32df-956f-99502a2e2a50.roa
File: 1f622ac3-beb4-32df-956f-99502a2e2a50.roa (raw, json)
Hash identifier: tvb27JwDNKcBhh/WPfGhvxrEzxiRBji9MDiNVlVQ0II=
Subject key identifier: 3A:6C:0F:D6:FB:C0:DD:43:E4:4C:35:AF:FC:4D:FA:5E:B2:01:A0:1D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404C3537EBAEE69015EEF12700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f622ac3-beb4-32df-956f-99502a2e2a50.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 132.223.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4c:35:37:eb:ae:e6:90:15:ee:f1:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=7901de5d-ca9a-46bd-ad49-83ecce3e5bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:b8:6c:ca:6e:08:f7:d7:ea:a6:0c:6f:33:
66:de:5e:b0:74:b8:48:29:79:68:e2:79:cd:24:42:
0f:95:85:13:5b:85:78:ce:3e:a6:84:54:44:56:7b:
2e:98:a1:02:94:4d:50:7a:56:19:f5:d4:a1:f7:64:
d7:82:fc:5c:30:06:3f:48:01:71:4b:32:7a:05:68:
0c:7b:e6:a5:16:31:a2:75:67:85:f5:59:d3:73:41:
91:8a:3e:6e:e4:0f:a3:a3:ab:35:7a:ab:12:e0:d9:
78:84:e3:65:92:5f:35:62:24:ae:b2:90:bf:2c:62:
36:be:17:21:fa:b8:31:f9:06:fe:7e:1d:7c:72:71:
4a:59:53:6c:fb:ed:7c:fe:67:b4:c0:76:e8:00:52:
97:8c:14:e5:14:42:08:d3:5c:60:7d:e4:a4:68:d1:
75:79:f8:19:8e:d4:c8:fe:56:bc:e8:a6:0d:ad:4d:
fe:27:99:92:99:23:bd:c5:1a:c1:16:81:2b:13:2a:
2f:d2:b9:fa:74:b7:ae:31:8e:1c:cb:fe:37:ca:bf:
ac:d3:7b:7c:cf:ea:3f:c2:d0:ac:0a:cc:57:dc:b4:
c4:ec:55:bc:78:7c:6f:e6:fe:33:be:20:11:fe:a4:
20:c3:92:85:b0:16:2a:4e:db:6f:3f:15:d6:1e:ad:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:0F:D6:FB:C0:DD:43:E4:4C:35:AF:FC:4D:FA:5E:B2:01:A0:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f622ac3-beb4-32df-956f-99502a2e2a50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
132.223.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:6d:33:76:3b:46:ad:b6:ec:04:1d:dc:76:77:60:7c:85:f7:
6a:f4:1a:b2:3c:ba:27:48:40:68:48:3b:16:27:80:e5:ac:ef:
79:22:b9:fc:25:3f:a9:a1:b4:54:bd:0e:4f:9f:3e:97:ca:99:
45:17:c1:9a:3a:47:d9:5e:37:71:82:a0:a0:c1:2a:14:44:ef:
44:62:43:6f:fa:e2:9a:41:42:58:fc:d0:55:9d:e1:75:49:3c:
0c:1f:1e:5b:ba:b0:68:25:75:a7:ba:17:49:d7:a1:5b:cc:f3:
dd:b3:54:bb:9a:89:e9:56:77:ec:04:43:5e:d1:98:2d:2a:1c:
68:0b:94:41:d7:af:ac:27:36:cf:d8:6a:02:1d:f5:be:35:fc:
d5:42:5b:ce:e6:90:91:45:4d:b5:15:e2:c1:7b:83:02:15:0b:
07:b2:b1:61:78:62:69:d7:c0:93:ab:5d:dd:60:fc:6e:18:b6:
2b:73:fb:27:17:da:b6:5b:2e:b9:83:be:b6:5d:14:3a:56:00:
56:7f:36:51:87:b1:97:f9:53:dc:5a:52:a1:c4:5a:7e:f7:ac:
71:db:22:43:7b:e5:43:81:76:97:ea:ff:2c:ac:72:fd:c9:94:
8d:71:08:3d:e9:e7:04:a4:ff:1f:8a:ee:d4:f1:5e:bb:f1:b8:
de:41:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:02 2025 by rpki-client