Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37a7252e-d9ab-325a-9b49-b93a4587c797.roa
File: 37a7252e-d9ab-325a-9b49-b93a4587c797.roa (raw, json)
Hash identifier: 6f7MOEFnpvgy9LrTug+b/y41f0xUZRLHRvnpv3H3a5c=
Subject key identifier: 67:E4:66:15:17:B4:72:C9:E9:8A:FC:13:C8:F5:5E:DE:F2:E6:A3:22
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405F05B9C82435194E89F2D620
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37a7252e-d9ab-325a-9b49-b93a4587c797.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 32.164.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:05:b9:c8:24:35:19:4e:89:f2:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=9b4d1f15-36c9-4ffa-92a2-dde7d79bbc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:a7:54:dc:36:53:7f:ef:fe:70:52:de:d9:
0e:4e:4b:8d:94:a1:39:30:43:3b:11:c6:6c:f7:67:
0a:70:0e:62:61:47:a0:8c:8e:74:d6:6d:ac:26:c7:
4c:97:0c:fa:c3:cc:ff:24:0e:0b:ed:a2:c6:f9:e5:
fc:d8:57:ca:fc:20:91:a6:e9:2e:fe:f3:d4:35:f9:
68:7b:1f:93:2f:da:23:9c:15:18:48:c1:af:f6:93:
1f:2d:9b:4e:40:61:fd:b6:53:45:3d:51:ba:9d:41:
ff:25:9b:d9:27:cb:03:70:9e:e7:86:34:7a:d5:cb:
4a:71:db:c9:25:cc:c3:1b:86:e8:4a:85:76:92:30:
22:0b:9f:79:ca:c2:6f:35:fe:b4:a1:70:c7:f1:46:
16:bc:75:ab:56:7d:4e:97:b1:b0:d2:13:1f:4c:95:
8b:1f:ec:0e:1e:3f:27:32:0b:ac:24:ba:21:da:bc:
dd:25:21:62:32:ba:48:61:88:31:0f:58:2d:a4:68:
39:56:40:80:77:e3:b3:bc:56:66:57:b5:8e:aa:ee:
14:b4:0e:8d:3b:5d:14:ec:3b:12:64:50:22:35:ee:
a3:8c:8d:60:07:21:ee:e6:cf:f2:a9:14:7c:cb:75:
68:92:ce:2f:ac:99:a5:57:ee:96:ef:fa:29:54:00:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E4:66:15:17:B4:72:C9:E9:8A:FC:13:C8:F5:5E:DE:F2:E6:A3:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37a7252e-d9ab-325a-9b49-b93a4587c797.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.164.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:88:1d:8e:ae:69:14:55:a2:ca:c2:7e:02:38:e8:be:12:7d:
66:9e:5a:7e:9d:56:31:db:08:51:5e:68:1d:27:f3:34:ed:5a:
dd:95:6e:8e:b2:dc:41:70:6a:5d:66:2e:cf:8c:3f:b5:ce:01:
7b:4b:a2:0d:85:3f:c6:05:4f:e2:5b:0d:22:be:9e:cd:13:f5:
b9:b3:08:af:7a:e4:40:a3:1d:7f:e9:7a:2f:43:2e:ca:c5:bc:
3e:d9:ce:46:88:0b:fa:63:01:9d:1b:ef:89:89:03:e5:10:d3:
20:d3:17:71:b5:12:61:0f:e3:db:91:bb:32:ab:7a:d9:e3:76:
64:db:04:66:f4:44:85:77:03:cf:82:91:9f:bb:cb:6f:b1:c0:
71:e8:79:36:1a:c8:c5:40:69:63:37:9a:a4:99:44:d3:c8:bb:
4a:b2:41:a1:33:84:11:3b:3e:8a:43:9b:1d:79:03:f0:48:0e:
31:36:c1:39:44:6a:5b:c7:79:fa:bd:39:7e:48:21:1e:95:a1:
bd:7b:77:6d:f2:67:0e:d0:6a:54:e8:81:26:3f:61:fe:e1:9d:
2c:57:be:37:24:6f:b5:5c:c0:ad:c4:2f:e1:2f:2c:46:5c:4f:
cb:a1:ce:fa:8d:b2:4e:1d:3b:01:07:a7:de:eb:e6:1f:37:2c:
81:f2:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:37 2025 by rpki-client