Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24b932a7-56d6-3c93-bc4c-897526ec5f7e.roa
File: 24b932a7-56d6-3c93-bc4c-897526ec5f7e.roa (raw, json)
Hash identifier: f3twAGKTckaH0Z3BSXbAB91qG+ya7JSXgCq+LbK6QIA=
Subject key identifier: 51:CA:CF:85:CA:18:E7:BD:6F:0F:17:93:D2:B3:58:EF:63:92:8E:91
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5A583F72FC0EE86A85A3A7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24b932a7-56d6-3c93-bc4c-897526ec5f7e.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 162.254.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:58:3f:72:fc:0e:e8:6a:85:a3:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=0caeda0a-847f-45fb-9e0b-fcf773d69a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:30:94:52:1f:86:a7:2c:ba:2a:72:31:7d:
d9:21:67:cb:00:3d:8a:c2:d6:ce:60:bb:35:e8:5d:
47:9c:e3:45:1e:80:a0:0f:c9:9f:b1:b1:53:5b:06:
31:82:0f:71:5b:72:db:73:86:76:c7:0f:fc:f0:14:
5f:38:e8:5c:d0:10:13:76:c3:8c:00:0f:ac:38:47:
90:09:1f:d9:71:bd:24:c3:01:ae:5e:34:14:37:80:
e0:70:20:4a:ba:32:2b:43:98:e5:f1:ae:12:1f:5e:
68:96:f8:68:70:c3:51:27:e7:98:d2:75:b1:c7:da:
14:4a:3c:c3:61:17:6d:66:42:51:8f:f3:76:d0:87:
66:43:bc:75:ff:1c:0b:df:24:7d:73:98:d0:c6:d4:
0d:cb:f0:f8:d4:e6:bd:87:89:1b:0b:3f:72:ea:6f:
10:48:fc:06:82:03:a0:ce:f7:d4:f8:7a:36:4d:54:
bc:29:5d:cc:36:e8:46:ba:86:ab:eb:8f:a8:04:32:
36:c2:28:d7:62:b3:8a:ca:5c:d5:3c:f8:ab:6b:ad:
0a:6c:eb:fa:e7:3a:50:54:a8:ae:64:0a:23:09:6c:
54:fb:4d:be:19:a3:7c:cb:36:11:18:a4:0c:a5:9e:
53:86:4c:41:39:73:9d:ff:a9:7f:63:53:b8:a5:b5:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CA:CF:85:CA:18:E7:BD:6F:0F:17:93:D2:B3:58:EF:63:92:8E:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24b932a7-56d6-3c93-bc4c-897526ec5f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:1f:60:6e:e6:2e:16:2a:db:1c:1f:b6:f4:ab:8b:a2:f6:2f:
28:16:24:df:fc:2c:0c:15:e0:42:f8:c2:62:64:f7:00:fc:a3:
ca:f7:91:fd:db:81:c9:b0:c7:b8:b2:43:a9:18:a0:ac:16:6f:
c9:70:79:e4:e0:85:dc:ee:0b:0f:dd:89:c1:31:a6:29:84:d4:
61:c8:31:6c:ac:b5:dd:5d:85:fb:a8:de:df:de:9c:d7:00:b0:
fe:d7:f7:5e:7b:3d:c6:af:3c:b1:3e:70:32:e2:86:4c:41:7e:
b2:b7:a5:57:35:d5:e3:24:3a:c3:e4:a6:97:06:f3:17:8e:80:
71:3d:85:64:58:74:ea:bb:a8:64:2c:f6:55:2e:f1:20:04:c3:
d6:8f:18:76:05:7c:d8:92:67:dc:79:b0:55:97:2a:84:45:af:
29:7a:39:3f:ef:8e:3a:32:dd:27:87:dc:ba:f1:01:7f:cd:48:
09:07:20:82:22:22:49:8e:80:a0:63:4f:35:67:f4:ba:e4:e5:
f6:6a:bf:ab:83:2c:2d:c3:a6:3f:ac:c0:af:7a:39:8f:57:3b:
27:3a:4b:00:db:b7:3c:c8:45:8b:42:ed:e1:e1:b5:9a:c0:24:
50:db:ef:9b:3b:eb:61:8f:88:1e:ee:88:06:b5:17:c7:61:e2:
46:22:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:22 2025 by rpki-client