Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/432a77b2-4af9-3265-a1c7-f3bf8e8846db.roa
File: 432a77b2-4af9-3265-a1c7-f3bf8e8846db.roa (raw, json)
Hash identifier: gC9J/BhNaQN0wpUxpjwLuRdEO9tfZV5hT9CknI+T6kE=
Subject key identifier: 6D:83:4E:AF:69:10:FD:40:40:C9:91:0A:3A:CF:3A:73:9C:8E:E9:74
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405F75793BB614B90D22590A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/432a77b2-4af9-3265-a1c7-f3bf8e8846db.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 32.168.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:75:79:3b:b6:14:b9:0d:22:59:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=6ceadc93-4fb6-4dcf-9040-549e0db01f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:dc:24:e7:e4:78:fc:a2:41:f8:3e:e8:bb:
74:d0:c1:41:07:1e:70:98:1a:98:16:13:c3:96:36:
77:da:72:24:60:63:c6:ad:d9:83:9f:45:cc:a0:22:
ad:b8:9a:54:29:e4:51:58:43:45:2b:75:a5:a0:c9:
83:d9:e0:b8:94:1a:a3:c9:0b:ce:59:a8:17:6f:b0:
b5:3f:2e:52:a8:96:ab:50:aa:05:db:d5:07:a4:95:
da:16:25:71:34:08:f0:c6:c3:a3:d4:23:42:32:d3:
7f:00:25:4f:a3:c4:4c:0c:ac:f1:42:42:c4:c3:bf:
40:b9:e4:bc:2a:24:85:8a:5f:66:a8:05:61:62:b8:
0c:57:e4:59:7f:8e:e5:1f:1f:60:df:04:86:7e:35:
ff:ae:7a:67:66:51:7a:ee:ff:a3:65:63:7f:47:c4:
2c:55:24:8d:18:8f:cc:17:4e:97:09:09:05:c2:90:
fa:63:bb:62:20:db:1c:0e:bc:8f:09:53:81:18:68:
b4:c4:7a:c7:27:65:41:a0:da:96:6f:22:4a:52:84:
85:01:43:2e:b6:44:bc:d2:cc:0e:a3:26:21:57:26:
0c:1b:d0:b7:23:ba:6d:f9:07:e0:d7:7e:ec:de:28:
dc:39:17:ec:4f:97:a6:9b:1f:9b:0d:50:97:86:cf:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:4E:AF:69:10:FD:40:40:C9:91:0A:3A:CF:3A:73:9C:8E:E9:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/432a77b2-4af9-3265-a1c7-f3bf8e8846db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.168.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f3:62:0a:85:1f:d9:13:08:7b:3c:11:cc:c3:ce:63:db:ba:
33:f7:9c:52:70:b1:23:b9:19:05:53:62:30:93:70:1c:3e:19:
ed:b9:30:4c:96:25:7e:dd:c2:48:9a:5b:dd:b7:91:a7:5b:2a:
01:96:c0:98:eb:27:a9:2c:35:a1:21:a8:48:0f:f8:95:d6:d0:
e2:b6:3f:ad:fe:0b:c6:73:a5:ba:a1:da:8e:64:4b:e4:6e:7a:
2d:0e:be:09:78:7a:dc:24:0f:a8:1e:eb:44:e5:ee:f8:6e:59:
af:e6:0e:22:10:1c:23:62:25:65:81:d7:4d:63:0c:ae:6e:39:
3c:58:9e:10:ea:70:c3:ba:55:1e:e3:22:ce:49:2e:01:b3:db:
0b:64:db:44:8b:c6:f2:eb:4f:40:55:6a:4b:f7:57:88:73:05:
58:44:79:8b:bb:ee:1c:10:c7:36:8a:92:f4:39:ff:47:56:dc:
d4:9b:2b:9e:42:60:e4:a7:6a:c2:f6:d9:e6:11:2e:4b:8f:1d:
b3:bc:fe:15:3a:12:4b:56:67:2d:aa:40:5c:7a:fa:c2:45:a9:
1c:d5:88:38:dc:2d:8f:20:b9:e8:d2:f6:41:f7:32:5d:bc:e0:
52:26:67:e1:4e:e6:90:fe:c6:3e:f7:68:77:99:a6:d9:3f:3e:
02:e7:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:35 2025 by rpki-client