Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32e9340e-94ee-3035-abbc-f6d7511d6f05.roa
File: 32e9340e-94ee-3035-abbc-f6d7511d6f05.roa (raw, json)
Hash identifier: hN4P9cEptBuigt0N7TPIxAXSrXWN1ob7vmPEbbPj+eQ=
Subject key identifier: 21:C3:30:6D:B6:D8:BD:C5:15:E9:21:58:EC:21:08:E0:8D:7E:F7:4F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408955E853209FBB55A5084200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32e9340e-94ee-3035-abbc-f6d7511d6f05.roa
Signing time: Tue 10 Jan 2023 12:00:00 +0000
ROA not before: Tue 10 Jan 2023 12:00:00 +0000
ROA not after: Wed 15 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 131.127.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:89:55:e8:53:20:9f:bb:55:a5:08:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 10 12:00:00 2023 GMT
Not After : Feb 15 05:00:00 2023 GMT
Subject: CN=c644a454-b1cd-49dd-b7ff-d5ba1695604a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:59:e4:d3:93:d7:25:0f:35:6e:b1:39:d1:
c9:ec:4a:44:0c:09:d5:84:3f:2b:05:75:d2:e1:7c:
c9:b0:ea:3c:37:d2:53:01:85:61:87:46:31:b4:b7:
1b:ff:ae:2d:d7:5b:65:a1:c7:9c:56:da:8d:33:c9:
fd:db:6c:b2:cd:75:9e:02:f5:1a:2a:22:e1:ee:0c:
ca:80:be:f9:d0:aa:07:54:f5:bc:d9:76:e9:e3:85:
d8:7a:72:65:ce:d8:de:cb:6d:be:39:31:dd:ce:e1:
d6:73:c1:9e:21:92:78:45:7f:5c:c6:ec:3d:88:83:
df:49:b1:66:81:21:fc:7c:20:50:c1:29:31:51:ad:
fb:34:1f:80:1b:11:72:76:7a:94:1c:78:87:57:8b:
f5:4f:d0:53:af:17:87:9e:3f:5e:42:38:26:f6:80:
cb:a9:d4:4c:73:d0:ee:1b:1a:d0:3b:ab:22:eb:e1:
ab:1c:c7:7b:e3:9f:f0:3e:2c:a5:00:9d:06:8f:01:
1b:3d:64:e4:3c:08:57:c2:8f:a7:8c:be:27:17:88:
35:db:64:b8:79:50:b4:41:0b:60:25:59:d0:e1:89:
19:42:b5:d4:d8:c8:d8:6b:e3:91:99:3f:c0:7f:70:
67:01:69:9d:d4:b3:04:bc:af:5d:03:a3:08:86:fd:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C3:30:6D:B6:D8:BD:C5:15:E9:21:58:EC:21:08:E0:8D:7E:F7:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32e9340e-94ee-3035-abbc-f6d7511d6f05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
131.127.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:3e:6d:46:7e:3f:3b:8c:ac:f2:9f:82:da:67:2f:34:85:3d:
53:ba:1e:87:77:72:6e:20:db:75:30:f4:8e:8e:ca:17:4e:da:
53:91:3a:9d:38:ed:a6:7a:2a:d9:23:8d:92:81:b1:84:2e:05:
92:7e:e3:d3:ba:1e:73:50:e5:67:aa:31:76:d3:e1:b7:ed:e3:
63:94:a9:d1:a6:0f:c4:a4:5d:da:a2:fb:0b:b3:b4:ba:78:3c:
5b:6a:dc:69:69:ba:66:ee:73:90:b1:0f:00:a0:64:31:ad:12:
28:c0:f3:e5:5a:6d:08:7b:51:1f:67:b0:8b:8c:db:68:c3:db:
f1:4b:fe:69:76:7d:87:35:0a:01:c1:11:ea:e6:1e:ee:1c:cf:
58:48:b5:dd:61:e2:4b:21:6f:55:77:de:52:0d:b3:2e:81:ae:
6a:ab:8f:0d:e4:5f:e6:b2:15:11:8b:b8:6b:fb:51:9d:43:fe:
ae:b1:33:89:1e:6e:b0:1d:00:40:b6:ce:d4:5c:ee:60:a4:07:
88:bb:c7:a1:45:82:bb:b5:7d:0f:6d:a9:e6:38:e9:fc:06:2b:
77:fa:d4:16:01:eb:67:06:10:3b:ff:82:44:e2:9f:66:18:0a:
e1:6c:6d:60:34:64:4e:38:65:58:7e:cc:8a:f1:12:7b:92:fb:
41:f7:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:10 2025 by rpki-client