Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cb5156d-75b2-3950-8563-b8139b22eaad.roa
File: 3cb5156d-75b2-3950-8563-b8139b22eaad.roa (raw, json)
Hash identifier: 0DYfGXTdSW1DDCL9s6J+Rt+a6a25wPlkz8dBrXalOAs=
Subject key identifier: EB:42:CE:44:99:42:DB:87:0C:E3:EA:B1:36:81:EF:5B:8E:3F:53:6D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584044E1390710024358320DF980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cb5156d-75b2-3950-8563-b8139b22eaad.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:e1:39:07:10:02:43:58:32:0d:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=cd7fc2f3-4b51-438a-ab38-b7d600245837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:63:c8:6d:e7:cf:46:35:5e:93:19:ad:88:
91:fc:e4:d8:2f:5f:f7:39:5b:0c:24:6c:8b:66:08:
f8:10:9e:39:2d:96:c5:8d:f6:8b:63:80:2f:95:a8:
e6:4b:f9:f2:88:81:1a:48:52:53:f3:a9:bd:cb:2b:
fc:1e:92:e0:b6:ba:10:af:75:04:70:61:4c:4e:f9:
94:8b:06:01:63:09:43:85:26:53:cb:9c:5b:96:9e:
2a:ce:29:04:a7:48:89:9b:7c:77:f4:fb:65:c8:ce:
b3:e3:b1:20:35:21:a8:81:7e:a6:54:52:1c:dd:cc:
52:59:63:9c:ab:e3:33:d8:43:f7:90:2d:e6:2d:b3:
9a:b1:86:72:6b:fe:76:bf:24:85:6e:5a:07:73:d0:
e3:ef:90:e5:50:7f:f8:80:f5:15:ff:e2:f9:ec:5d:
fe:3b:4c:d6:82:9e:56:5f:86:be:24:b0:6a:7d:d3:
fb:39:ba:16:c6:4e:43:31:5b:fe:7f:dc:0a:a9:88:
f2:78:35:3a:ff:40:f8:43:2f:d4:36:9b:9b:bf:24:
42:9d:45:75:4a:3c:e1:d4:4e:6a:97:bc:00:19:8a:
a5:3d:c1:90:53:17:d8:5c:26:a1:fe:26:d2:59:48:
5d:37:67:cb:14:fb:d3:c8:b3:27:1e:bd:61:f9:b7:
b5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:CE:44:99:42:DB:87:0C:E3:EA:B1:36:81:EF:5B:8E:3F:53:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3cb5156d-75b2-3950-8563-b8139b22eaad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.10.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:fa:32:a8:2c:e5:93:56:7f:7d:07:6c:3c:24:59:07:22:9e:
e3:73:8a:b7:08:69:98:c4:4a:85:65:eb:fc:2f:71:8d:e7:56:
b1:2e:1a:3e:f1:d3:bc:01:1b:1b:d7:cb:8a:77:0c:3c:23:5b:
df:a2:8e:a4:40:38:4a:95:5f:68:46:8c:78:c8:46:9c:76:4b:
03:e1:ee:da:de:4c:02:9a:ce:05:03:c3:80:92:c7:d6:ec:67:
82:9e:fb:21:16:80:66:3f:43:11:06:b6:e3:1f:68:96:ed:b6:
52:7d:ec:6e:e6:53:63:20:16:62:5e:ac:b2:02:df:38:51:c1:
52:cd:b1:61:07:63:ec:65:d0:5b:94:7e:6f:3c:1f:19:27:42:
76:96:16:8f:b4:bd:53:1d:4e:4f:e1:16:cb:01:5e:4c:ac:d0:
bb:73:70:13:02:a2:13:02:71:83:6e:81:80:75:91:69:0a:f4:
db:fc:84:e7:8e:f9:12:75:a1:be:c9:c2:ce:3c:3d:2f:21:d7:
41:e2:c0:cd:4c:d5:09:de:21:e5:da:db:5f:b4:f2:4c:38:10:
fc:e6:7e:9c:f2:f6:8f:87:2d:5b:1c:b1:d1:8e:73:c3:76:df:
de:ba:1c:b9:61:1f:54:ed:86:1f:3e:46:98:8d:0d:0d:d5:66:
65:b9:7e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:00 2025 by rpki-client