Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4da4ef6a-b23f-3ad7-9a68-8f2429efe41d.roa
File: 4da4ef6a-b23f-3ad7-9a68-8f2429efe41d.roa (raw, json)
Hash identifier: vlUwRbPpQSD0NNl4IiOv2vDeLowsaTn44LcJEKzKRsM=
Subject key identifier: B2:78:3A:59:B3:26:51:72:C0:C9:E9:89:F4:00:C7:CB:AF:B1:C8:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404480774776DE985F56552F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4da4ef6a-b23f-3ad7-9a68-8f2429efe41d.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 63.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:80:77:47:76:de:98:5f:56:55:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=238e8ac5-7468-4c68-9043-d5aced90b892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2f:b8:a3:94:48:57:d2:69:68:fd:d4:cd:a5:
5f:24:2a:4b:97:1c:a7:49:a1:88:b3:5d:16:a5:9e:
1f:06:7c:77:a3:95:f7:a6:46:ac:4f:a1:8b:bf:94:
c0:2b:ca:d9:9e:72:73:0f:5b:45:36:aa:78:d0:3d:
ab:4d:e5:f5:e6:b6:3e:e4:ad:a4:81:a1:8b:fa:16:
4e:99:d9:91:39:96:c2:15:e7:0b:d3:8b:c4:db:c8:
09:5c:b3:e9:45:4c:58:42:2b:9a:db:bd:5b:87:c4:
7a:23:50:cd:97:52:4b:71:eb:16:2f:d4:6b:43:1a:
3f:e5:97:16:5c:d6:e4:61:28:03:ee:a6:11:8d:ea:
a5:21:f7:e9:38:f1:bc:29:f1:0a:db:b2:03:f2:5c:
3f:46:7f:11:b9:20:c3:48:98:98:96:ab:d2:b4:6a:
44:24:1b:ac:76:39:b9:5f:1c:7d:b6:61:38:c1:1f:
12:08:97:1e:a4:21:f5:6c:ef:28:d6:20:0f:3c:55:
f6:bf:00:c7:8b:b8:79:90:16:da:18:49:98:b8:7a:
b4:da:4b:f7:ed:b8:49:8a:71:2f:72:91:be:66:da:
76:66:f6:49:7a:6a:34:bb:35:86:24:16:43:f5:30:
e0:b0:23:d3:45:eb:5d:7f:ac:86:df:49:a1:75:2c:
a4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:78:3A:59:B3:26:51:72:C0:C9:E9:89:F4:00:C7:CB:AF:B1:C8:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4da4ef6a-b23f-3ad7-9a68-8f2429efe41d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
63.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:05:e7:2b:f2:58:61:c7:12:e5:6b:ce:b0:48:d6:c6:27:c2:
d6:c7:da:6f:b8:e4:b2:bd:ee:38:f1:7a:a3:2a:83:d6:1d:88:
8f:f5:b4:4c:0e:ac:69:3e:61:45:7a:6a:fc:b4:8c:46:c0:e4:
99:fc:24:16:42:26:df:38:0b:b8:45:ab:8b:35:79:a3:4a:f1:
c1:62:3a:ef:2f:a9:c8:79:1a:87:33:cc:63:5d:94:b0:a3:bf:
c4:46:77:bf:0a:00:5b:38:f7:46:3a:95:72:1e:bf:74:57:95:
26:0b:da:f8:c7:d0:d9:39:88:27:1d:3c:60:04:d5:bd:79:34:
90:10:e4:34:82:80:66:49:8a:b0:92:42:ee:8c:bb:20:94:b9:
3c:67:7d:df:c7:e0:87:27:7c:59:79:70:84:76:37:44:d9:29:
da:75:55:35:4a:61:1a:e5:6b:86:d5:05:1d:c8:92:2a:a8:67:
ea:8c:8c:98:66:41:d7:10:a3:ff:ae:f4:e8:5d:f9:76:43:68:
ab:6c:63:7f:f6:a3:85:57:dc:3b:ee:e0:9e:0c:9c:84:c6:95:
56:5f:8b:32:11:a7:c5:ee:27:22:84:bc:06:cb:c9:88:7e:2e:
22:66:b7:a1:b1:54:82:a0:0a:1e:34:8b:d1:8b:52:de:f2:0f:
b1:e7:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:48:01 2025 by rpki-client