Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/45d121c2-dae1-3d5f-87d5-438958ba008c.roa
File: 45d121c2-dae1-3d5f-87d5-438958ba008c.roa (raw, json)
Hash identifier: VnSdziGHV4qynCuhlY+XnYW9HVOB87hOIY5Z/j0kEs4=
Subject key identifier: 90:60:CD:14:9E:DF:82:11:AD:85:9A:56:CD:70:8F:9D:D4:41:44:D6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EC320BF9FC256657FD6E75420
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/45d121c2-dae1-3d5f-87d5-438958ba008c.roa
Signing time: Sun 31 Jul 2022 12:00:00 +0000
ROA not before: Sun 31 Jul 2022 12:00:00 +0000
ROA not after: Mon 05 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 192.31.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c3:20:bf:9f:c2:56:65:7f:d6:e7:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 31 12:00:00 2022 GMT
Not After : Sep 5 04:00:00 2022 GMT
Subject: CN=fb4fab1f-17de-4f26-8280-057de9e6de19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:8a:39:c7:16:38:fe:37:80:89:a7:de:82:
e0:38:9c:01:aa:eb:8d:94:70:33:03:21:af:fa:ae:
b8:f0:69:ed:df:2c:64:83:9f:e5:53:05:ad:98:eb:
c8:d7:f4:38:55:d3:75:01:bd:cb:b6:4b:cd:9c:59:
3c:75:2b:f4:08:6f:36:af:6e:5e:1a:40:2c:99:ea:
07:78:a8:b9:5f:4f:0c:80:d8:c8:9b:37:9f:a1:b9:
e7:06:a3:00:17:1d:83:15:93:d2:83:89:f0:e7:81:
b3:f7:a1:08:ae:5e:6a:1f:50:f1:ef:72:2b:78:03:
82:0a:37:44:2c:96:9d:9b:69:1b:de:06:7c:ab:23:
f4:65:2f:55:8a:3c:7e:fb:0c:40:55:b9:87:5e:9d:
87:47:3b:4e:3a:d4:d8:75:27:fa:89:13:da:1d:fb:
75:a9:a6:56:a1:fe:f1:8d:44:d4:01:82:27:96:a7:
e8:c5:16:9b:eb:f4:e8:e3:ae:ee:a1:c7:6d:ea:c0:
20:0d:4f:17:32:b6:dd:b0:60:d3:4e:0a:42:6e:08:
63:a8:c1:2f:3b:c8:1d:87:32:12:ea:e4:1f:d2:c6:
9b:b1:82:2e:dd:7a:a9:37:5b:ce:c9:37:b8:95:02:
f8:a3:40:80:3b:1a:70:05:0b:c6:a8:9a:df:8a:2b:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:CD:14:9E:DF:82:11:AD:85:9A:56:CD:70:8F:9D:D4:41:44:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/45d121c2-dae1-3d5f-87d5-438958ba008c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:e8:68:d4:f8:f2:26:03:ff:3b:3f:cc:36:e7:96:9f:a5:ca:
e3:10:f0:c3:00:b1:39:a9:15:e4:08:9c:0a:06:a4:a7:bb:9d:
51:e3:2c:01:21:99:41:1f:3b:9f:a2:3a:0c:e8:fb:1c:62:0e:
80:a9:74:f4:11:7f:4f:a2:33:4e:73:11:90:5b:30:01:b8:48:
fc:0c:ac:2b:23:11:af:ef:c6:f2:dd:f2:11:d7:27:fd:d7:6a:
a3:f3:3a:09:11:48:c1:9c:b0:f5:d9:71:74:78:da:a6:d8:6c:
06:e0:3f:64:87:06:e7:18:a7:80:ab:f1:a5:e4:e1:1d:a6:1e:
3a:b0:64:a0:fd:1a:93:cb:36:01:dc:31:aa:23:ed:0d:af:98:
43:cc:75:aa:7f:6b:74:b0:ac:58:85:66:be:b0:02:9e:30:9b:
c5:af:30:f0:14:64:64:ce:05:8f:26:96:9b:03:bb:f3:be:dc:
14:a8:bb:55:b0:34:c3:06:dd:60:22:68:cb:1e:05:cd:cd:af:
b2:35:e1:6b:42:41:0a:ad:1f:f4:77:51:3d:38:40:92:ef:a7:
66:fe:11:b0:97:e1:20:c1:ba:6f:41:13:a1:54:b9:aa:91:84:
ad:d2:fe:e8:b1:58:19:74:43:66:ad:9f:ef:c4:89:d9:77:16:
80:bd:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:07 2025 by rpki-client