Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f16948-5158-3715-a347-967e1bb6f0c8.roa
File: 32f16948-5158-3715-a347-967e1bb6f0c8.roa (raw, json)
Hash identifier: d6gQxymIaMSy8wT8VfXNobFZhQtl8t0CWrCwr9ApLuk=
Subject key identifier: 96:F0:33:D7:37:88:9B:FC:7D:8C:C7:8F:3E:C9:6C:68:97:90:DE:E8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBCD0BE003FDC0325DA896C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f16948-5158-3715-a347-967e1bb6f0c8.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 70.132.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:d0:be:00:3f:dc:03:25:da:89:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=2f935c41-9a9c-4ab5-8921-14295b2f4fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:ea:09:0a:ad:c9:22:23:9e:a3:99:91:73:
3b:6e:92:3c:24:0e:fc:ba:24:1e:e1:d6:72:5d:84:
cf:8e:c5:25:9f:49:0f:d7:f3:5d:b4:a8:23:ce:40:
8f:0c:e5:62:92:fa:cd:94:3a:5e:e5:12:8d:1e:db:
b6:ad:99:e4:49:e2:6d:73:8d:55:fa:ae:29:68:60:
5a:75:9f:f2:68:77:cc:a7:ab:9f:ff:11:6c:cc:01:
9c:2d:ae:8b:d9:e3:80:44:df:87:2c:9e:79:5f:32:
59:aa:0f:89:6c:66:1b:fa:d3:c4:15:a0:f7:80:b9:
e1:b9:66:5d:06:a5:45:48:85:72:6b:c1:a1:38:06:
87:ec:21:e4:c7:f2:20:7d:71:3b:c1:bf:01:57:ce:
a3:66:6d:aa:24:f7:ee:43:c0:a4:b4:83:76:80:28:
fb:d7:fe:66:ae:22:e1:08:34:dd:8b:81:01:33:12:
98:dd:f0:12:3a:01:8d:fd:f0:2e:9d:9c:dd:95:9b:
6e:01:3d:e3:d5:71:e2:cb:b3:a1:12:0d:45:5a:ed:
e5:57:59:87:a5:0d:03:73:42:ba:38:9b:2f:cd:2c:
b1:2c:ae:fb:58:a2:ce:9c:bf:26:37:c5:de:7e:8f:
45:5b:71:24:c1:09:58:84:97:be:a1:8a:e8:27:a3:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:33:D7:37:88:9B:FC:7D:8C:C7:8F:3E:C9:6C:68:97:90:DE:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32f16948-5158-3715-a347-967e1bb6f0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.132.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:43:ec:59:10:63:a9:22:93:b2:92:43:3e:fb:c8:23:f6:4c:
a4:1e:a9:a6:cc:d1:79:e2:2e:65:cc:86:c7:6e:54:4b:60:42:
f3:a8:e4:b5:d7:ec:68:73:77:e2:ba:33:6b:60:7b:59:9d:06:
16:86:01:ad:2c:64:a1:23:80:3e:7c:d5:ff:e9:af:c7:a4:ce:
63:26:7a:eb:ae:ec:b8:c5:cd:af:0d:ae:ae:e2:e8:9c:63:5d:
96:0e:e1:d3:71:97:11:d0:6d:61:fe:a5:79:71:18:bf:0d:dc:
b8:44:84:ae:03:ab:14:1c:3d:9b:57:98:3f:68:1e:9a:c3:9b:
4b:4b:2f:6f:ca:d8:be:d5:03:ae:05:5c:2a:9b:a2:e0:d4:b3:
9d:ab:c9:13:82:50:3c:83:8f:83:b1:65:7e:96:7a:cb:85:f1:
3b:11:1e:0d:9b:18:b5:5a:1a:4b:54:9d:6e:f2:08:34:c9:1c:
e4:ec:6f:7c:df:5d:64:fb:5e:69:14:d6:0e:f1:18:eb:c0:65:
1d:1b:82:9e:ba:c6:9c:8f:92:03:04:1d:91:f1:bd:60:74:bd:
c0:45:db:42:b3:72:e9:08:e6:ed:b7:a5:d2:8b:c0:4d:06:df:
b0:2b:20:be:df:1c:e3:26:00:9e:21:c5:32:7a:f0:4c:8c:93:
78:2c:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:11 2025 by rpki-client