Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/292f5abc-9b7f-3c5d-9f45-f58535d225a6.roa
File: 292f5abc-9b7f-3c5d-9f45-f58535d225a6.roa (raw, json)
Hash identifier: Xh3pK8elNxMwLbdMbyuAPgHhTkMaT1PZr7PVMxqFF8g=
Subject key identifier: 4A:EC:3B:34:DE:B0:5F:87:8E:75:65:33:C8:A5:B3:B4:77:28:15:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9BFABD88BC14C4E84A654800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/292f5abc-9b7f-3c5d-9f45-f58535d225a6.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 32.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:fa:bd:88:bc:14:c4:e8:4a:65:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=f021b858-5963-463d-bceb-891ac1336540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:64:5b:32:a0:de:97:8c:fc:0d:d5:2e:36:
a1:e7:97:73:7d:25:53:9d:14:d5:5c:87:32:b1:22:
5f:3a:72:6f:c5:85:a2:66:21:98:b7:f9:3a:52:90:
2c:22:c8:ae:29:9a:5f:ca:41:45:22:b0:77:1d:8c:
70:e6:64:4f:5c:7c:18:05:4a:af:9f:f4:76:4e:b9:
49:a6:99:72:b9:38:65:f3:40:ec:d2:1a:98:35:3a:
44:4a:69:a0:b4:a9:ba:61:bf:59:ea:6b:26:c0:32:
ff:61:b8:4c:eb:01:7e:04:e2:b1:9f:66:ff:e8:42:
b9:3c:e2:0a:71:c3:a8:a7:75:c3:d7:e4:da:19:64:
a1:50:e7:0d:b2:c7:d5:8e:18:63:51:59:83:00:32:
01:59:af:4d:26:88:00:8f:fe:48:88:67:09:12:fa:
8b:62:aa:e0:4d:d8:59:49:0d:eb:56:7c:ae:cc:65:
39:67:e1:37:0f:df:68:35:6a:34:e7:34:d3:91:20:
a7:34:5f:00:8b:d2:c4:a4:ca:c1:7d:c5:81:ce:ed:
11:c1:1f:6a:11:36:78:fe:22:9c:78:d2:fa:0f:91:
8b:58:fa:9d:4c:ce:01:7b:46:b0:02:b9:1e:52:0a:
b2:75:a5:7f:74:e1:ea:f6:9f:ee:16:0a:c1:71:55:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:3B:34:DE:B0:5F:87:8E:75:65:33:C8:A5:B3:B4:77:28:15:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/292f5abc-9b7f-3c5d-9f45-f58535d225a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d6:8f:72:6c:e3:38:0f:a4:e4:d5:25:77:2f:92:84:e5:b1:
a9:3d:92:c7:b8:33:58:fd:97:25:27:a4:cb:4d:8a:f0:f7:31:
e2:a2:a1:0d:46:4e:a2:0a:41:50:46:19:ec:28:73:ca:a8:e8:
a4:b9:d0:d5:75:bb:1c:7f:3a:e0:ad:dd:84:92:8f:a1:5b:d7:
46:d3:c2:73:3c:23:2e:34:26:65:a7:3b:b8:25:c9:2c:a5:10:
73:a7:e6:9f:7d:4d:cf:0f:de:fa:be:6a:18:f4:0f:62:96:24:
dd:23:31:4d:ee:a4:0c:76:af:34:3e:14:83:f8:af:a1:58:a9:
cb:0e:2b:47:49:ac:02:66:0b:a2:d3:0f:cb:6c:d1:d4:18:2e:
d7:62:37:c8:2c:82:24:ac:ea:c1:4f:16:f6:39:16:c3:63:2d:
56:5e:5c:6a:c0:ac:14:4c:9e:ce:50:6f:da:e0:4b:16:80:f5:
14:8f:dd:c3:21:54:92:eb:1f:35:7d:0b:16:48:86:c9:6d:ef:
f7:ae:89:16:1f:7c:1c:26:90:1e:3b:e3:4a:48:fd:e5:74:80:
36:b0:77:4c:8b:2e:19:17:78:4f:60:04:67:0d:f5:4c:80:3f:
4b:a7:e6:e1:e7:b7:00:fd:18:2c:73:25:ea:e5:05:44:5d:bf:
14:7d:6d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:23 2025 by rpki-client