Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32c8e37d-fff9-3324-ac55-eba310abd79b.roa
File: 32c8e37d-fff9-3324-ac55-eba310abd79b.roa (raw, json)
Hash identifier: DiWW3dkSB6xk3m5mAbWpDp0/TfsLAqWwPYj8TtfpxNw=
Subject key identifier: 32:3E:6E:20:E9:5B:56:14:53:FD:A9:49:6D:67:A3:B0:90:9D:7D:1A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406590EAEA1A742399EB3F3C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32c8e37d-fff9-3324-ac55-eba310abd79b.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:90:ea:ea:1a:74:23:99:eb:3f:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=31debed0-2067-407b-8b58-c56ee9d1b8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:64:81:e8:5c:4f:ad:af:fe:e5:9a:91:6a:
db:2d:80:89:67:94:7c:a9:2d:76:ba:76:4a:28:62:
43:a2:03:1f:d2:7e:b6:e6:f4:d6:73:0c:a4:d9:db:
ec:23:f4:7f:02:e5:d1:fc:cb:f0:36:23:d0:f8:57:
42:b7:41:99:41:d5:f8:ce:2c:ec:63:be:c9:27:01:
55:cc:3c:ab:ba:9d:92:c9:8b:f9:11:2e:b1:5d:00:
6c:1c:52:46:46:4d:9f:5f:b5:a3:eb:7b:4a:22:7d:
ad:4c:f5:38:bb:91:7f:f0:99:ac:48:15:53:43:85:
00:ae:e8:9d:14:f2:ae:37:b4:56:51:a9:07:19:49:
58:87:67:9c:2c:e3:5a:c4:ac:19:55:da:29:de:b3:
d7:c5:34:13:14:5e:04:2b:23:a6:41:a6:01:1d:91:
01:ca:dd:6a:a2:ce:8c:64:03:b9:49:dc:ff:5b:f2:
c4:44:fe:a2:23:4d:4c:6f:9f:1d:8d:48:5e:bb:a1:
62:fc:07:98:c4:09:9c:23:9b:6b:0b:c1:31:29:ed:
b9:f6:7f:b9:21:71:6f:88:b1:ba:bf:ec:8b:ee:cc:
db:26:6b:0a:32:01:33:21:f7:f6:b9:0c:51:c4:69:
3b:42:1c:da:c9:a7:cc:4e:c0:ee:c0:c6:30:cb:1d:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:6E:20:E9:5B:56:14:53:FD:A9:49:6D:67:A3:B0:90:9D:7D:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32c8e37d-fff9-3324-ac55-eba310abd79b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:f0:74:b8:5d:e8:67:0b:00:eb:4e:dc:5f:8a:50:6e:e3:d8:
b1:a2:50:aa:c7:9c:5b:f1:21:27:c1:d2:8f:91:10:b2:69:8a:
9d:a4:aa:03:79:8a:14:62:14:1b:c1:df:6f:18:de:0c:f9:0f:
61:af:11:13:df:fb:66:a7:16:cc:11:e1:e7:7b:da:79:53:82:
e8:cb:2e:d3:34:e6:f4:d5:49:79:b2:99:c5:70:ef:52:fc:32:
22:d0:10:47:33:89:66:fa:41:f0:1a:7f:46:b8:0f:05:54:3a:
74:b0:e5:6b:53:c2:03:56:c8:0b:de:c7:53:22:5c:41:8a:ee:
be:49:50:5b:93:e2:b0:eb:4a:d7:cf:3b:43:d7:3c:1c:a2:31:
0a:fd:37:87:f1:b1:f3:8a:46:11:e8:66:a1:5b:b3:5e:23:3e:
86:02:45:4e:dd:43:eb:e1:f6:25:05:7d:62:bd:eb:87:10:44:
eb:3a:ea:18:fc:c2:46:b0:5a:f1:e0:13:1e:9e:82:8a:c0:eb:
c4:58:7e:82:f6:76:70:51:be:0d:3e:2d:2e:29:8d:cb:cd:9e:
df:c0:a6:4e:ba:bb:e5:77:01:35:99:d1:bf:f6:3c:91:9a:86:
ff:bd:b5:75:ab:51:b7:a2:2f:8f:69:77:df:31:a8:ef:d2:33:
a1:a8:8d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:24 2025 by rpki-client