Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a86cd66-ebad-3856-ac81-cc973bc5bfcf.roa
File: 2a86cd66-ebad-3856-ac81-cc973bc5bfcf.roa (raw, json)
Hash identifier: wT+1YMeToeVx889YZ2RiefV3NNhM/LFq6Nw5we83Sl8=
Subject key identifier: 8F:8C:67:CC:06:06:68:20:A2:DF:79:A2:10:E4:39:E6:82:10:DC:50
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584021A987FF0BFE45A720087DE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a86cd66-ebad-3856-ac81-cc973bc5bfcf.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Mon 09 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.31.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:21:a9:87:ff:0b:fe:45:a7:20:08:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Jan 9 05:00:00 2023 GMT
Subject: CN=e6eb41f7-4d79-41b2-91c0-92bee5ea3fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:39:76:3d:e8:41:9c:2a:32:1c:be:36:b5:
2b:66:ab:f5:b2:f9:b7:25:68:7c:95:ca:96:fb:0d:
1e:af:f0:40:f5:63:17:eb:50:23:0b:d4:74:05:48:
38:4c:f6:2a:1b:fa:79:2b:3d:de:ce:e6:4f:3d:61:
ba:e8:13:56:99:46:9f:8f:b4:8e:8a:42:d7:af:4f:
a4:6c:21:0d:d2:d9:df:ea:23:9e:75:47:ee:cc:78:
51:d2:f5:28:94:0f:d8:ee:f2:d4:38:18:e9:a8:21:
10:e8:e6:ee:ea:ff:56:16:2e:38:e6:29:86:6f:6e:
7a:ee:9b:34:ed:d0:fa:fe:59:6e:47:3f:71:88:90:
59:36:69:39:7b:3b:17:b1:ab:13:33:ff:c7:b2:fb:
a5:44:b3:fa:74:e0:88:29:ee:d0:9e:f3:db:fc:85:
17:5f:ad:f1:14:84:3b:87:a2:45:25:39:fb:21:51:
f0:bc:c0:ad:63:dc:b5:6f:12:bb:65:a9:f9:53:35:
a1:79:8e:d2:fd:9b:66:fd:4f:5f:cc:94:d1:f8:07:
0d:17:18:ba:86:79:61:84:d8:43:9d:3b:b3:d6:90:
e6:87:37:7e:d8:30:a7:53:28:61:ed:b1:f5:3e:19:
40:db:7b:db:01:1c:60:94:0a:42:7d:7d:f8:7d:fe:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8C:67:CC:06:06:68:20:A2:DF:79:A2:10:E4:39:E6:82:10:DC:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a86cd66-ebad-3856-ac81-cc973bc5bfcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:c3:ba:0e:99:e2:67:3a:4f:3c:43:e5:4b:e1:ec:d9:c9:0b:
a5:00:7f:2a:47:10:c7:67:05:19:e8:c5:ec:16:70:e5:2a:cd:
91:96:80:cf:db:78:b4:b1:fa:88:c3:1f:f5:8c:a8:50:9c:e5:
d5:63:b6:e8:04:8b:d9:4a:9a:63:98:de:90:98:b1:50:9c:4b:
f8:00:31:4a:d9:92:5c:c6:26:97:be:7f:6a:1d:7a:4d:06:85:
d1:f7:c3:d9:4b:b7:29:54:11:b4:17:08:16:37:fa:26:fc:af:
7a:f6:11:be:77:7c:7d:1a:e9:7e:11:2b:bf:15:e8:a5:4a:23:
2b:3e:14:0c:eb:4c:a0:4b:5e:7c:02:84:76:3d:98:55:7c:79:
44:8b:ae:0a:93:24:e2:77:52:c1:12:76:55:2e:32:78:38:b8:
2a:1f:78:e5:3d:16:ed:59:ea:7a:4e:52:f3:8f:58:fb:d6:d5:
fa:ec:bc:da:cb:d7:57:eb:77:53:95:a8:41:f1:c7:92:33:76:
94:52:7f:ed:da:88:b5:fd:d8:06:39:02:fa:9a:69:1e:7e:63:
48:80:10:15:2a:dd:09:69:a1:40:39:b3:5e:39:c6:8e:2a:dd:
7c:f2:18:58:13:7b:44:f1:1a:39:fb:1e:90:23:bd:e6:43:41:
f3:00:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:15 2025 by rpki-client