Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3446eef2-fa74-3485-aac7-ff1fdbab1bbc.roa
File: 3446eef2-fa74-3485-aac7-ff1fdbab1bbc.roa (raw, json)
Hash identifier: w6D7cb6iSGc4cN4nit34zUHwdHe+BtHF+YZVt2xrDN0=
Subject key identifier: DF:8F:E7:E2:18:EC:D8:55:3F:C7:53:D5:C5:7E:A1:B5:D7:61:80:EC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D810F4940EBF1C88485179FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3446eef2-fa74-3485-aac7-ff1fdbab1bbc.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 63.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:0f:49:40:eb:f1:c8:84:85:17:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=a0d78886-c753-49b3-b480-93b6cfd04eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:8b:bb:81:08:58:71:e1:66:48:29:fd:fa:
7b:a4:88:1b:41:ad:32:5d:28:a3:ae:59:db:5e:7e:
f4:fa:c8:13:93:fd:49:6a:cb:16:5c:44:fd:61:28:
59:b6:90:5a:08:9e:3d:e2:33:cd:03:42:cf:30:e1:
5b:16:90:dd:0f:d5:59:e7:de:2c:c9:19:58:77:6b:
f1:0c:8b:1d:f7:05:39:18:d2:1e:a7:e6:0f:35:76:
d2:57:9c:b1:ce:dd:7d:41:6e:e5:39:c4:6d:99:46:
61:24:17:08:9a:a1:81:0c:0c:15:45:2a:aa:84:a1:
71:e9:e5:34:cb:56:c9:00:d2:8c:a0:dd:cb:68:3c:
4c:9b:41:ba:f2:2a:40:03:16:19:33:c2:d2:6c:ba:
fa:a6:de:96:cc:44:a0:83:6d:0c:78:c1:fb:6a:e1:
72:60:11:43:15:76:c4:a1:bf:82:e7:3d:db:86:0c:
3b:f8:fd:0d:e0:49:51:22:b6:e2:1a:27:e9:36:da:
e5:72:8a:e7:50:cf:4a:cc:c8:30:f0:53:a9:78:7d:
e6:de:01:fe:9d:1e:9c:fc:21:73:60:6e:28:ca:97:
20:0e:94:63:ae:c2:68:58:d4:4a:73:b9:3a:b6:af:
88:00:5c:b6:35:92:22:27:37:b6:bd:82:af:f6:ba:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8F:E7:E2:18:EC:D8:55:3F:C7:53:D5:C5:7E:A1:B5:D7:61:80:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3446eef2-fa74-3485-aac7-ff1fdbab1bbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
63.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:4e:90:bb:3c:97:9f:d4:3f:65:33:58:35:05:53:63:8d:6a:
9b:7b:38:6e:11:16:b7:04:9e:11:cb:42:13:69:56:3f:9d:99:
fb:74:6c:13:f6:26:1b:d7:2a:f9:33:fa:72:3a:3d:9f:1e:7e:
94:c7:25:70:30:8d:5b:fd:b1:8d:de:0b:5d:aa:71:f4:03:f6:
5e:9f:8c:4f:ba:4e:c8:17:3c:57:65:be:72:08:75:b1:67:55:
15:6c:16:2b:d1:cb:84:1d:bb:c2:1f:a9:69:c3:a7:ab:f9:87:
ce:be:77:f1:53:9b:9c:f6:aa:4b:c1:82:6e:c5:ce:3e:25:b7:
0f:6f:e6:9e:7e:30:ae:c6:fd:35:c6:9f:3d:39:de:4b:33:41:
18:89:23:d5:d1:e9:e8:af:9e:68:86:23:06:2c:94:48:9d:57:
54:f5:b3:d9:8b:69:e3:20:25:5b:1f:f5:04:e8:b9:af:ba:34:
e9:49:43:ae:c8:da:cd:a1:51:c8:07:82:f9:86:a3:f5:df:44:
61:d1:ca:f8:0a:8a:6a:c1:7a:df:90:d9:33:52:bd:75:76:87:
28:cc:5d:b8:a8:a6:74:dd:f5:53:ca:94:d9:f6:c0:3e:ab:a7:
5c:3b:cf:bc:69:12:55:ab:f4:7d:f5:49:b2:fc:e8:18:0a:54:
58:6b:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:54 2025 by rpki-client