Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fd08ce3-2022-3ae2-91e4-2638a1c60fa7.roa
File: 4fd08ce3-2022-3ae2-91e4-2638a1c60fa7.roa (raw, json)
Hash identifier: 4XQ6s/YtoZ8lfARreMJbzoS4g2iGX1dOJN6qIg0HFBs=
Subject key identifier: 96:84:6D:0B:A8:D6:7E:D5:1B:7D:F8:18:69:3F:92:3B:58:0F:B8:4D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D500861DF729986A5B7886A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fd08ce3-2022-3ae2-91e4-2638a1c60fa7.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 14618
IP address blocks: 32.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d5:00:86:1d:f7:29:98:6a:5b:78:86:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=5f69cc50-7c9b-4ed7-9d8e-4bab51fe5c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:73:36:a2:2d:1b:55:94:27:ad:2a:40:29:
51:7e:77:5d:70:2e:8c:0e:c6:f5:78:41:69:3e:4e:
40:0d:e7:1c:bb:a1:70:46:ed:54:bd:bb:9d:50:6b:
a2:1d:d5:fd:f0:88:30:e8:9f:2c:22:38:a8:c4:61:
11:c6:e8:a5:8a:13:01:24:15:0d:f1:55:61:3b:5f:
18:8f:67:f1:51:a9:28:9a:c5:6e:4c:a1:52:01:61:
b7:c5:a7:c2:6b:00:77:d9:e8:40:84:68:57:14:d5:
e9:c3:7d:1d:81:0b:29:f8:f6:1a:0d:dc:88:10:4c:
0d:97:34:2d:85:1a:dd:f3:90:3c:bb:3b:13:bc:4e:
02:c1:fb:70:17:ef:96:57:f4:57:a6:33:66:0a:dc:
c5:a9:36:ee:6a:24:84:3c:fc:e8:23:d5:69:4f:c0:
7c:10:70:31:9a:b3:1b:31:5f:59:51:ef:0b:1a:e2:
c9:a2:70:09:7f:b7:02:26:e1:2b:31:91:f9:b8:f9:
96:1a:64:87:24:fc:d5:40:d6:5c:ea:70:21:4a:f9:
da:e4:ac:ca:12:50:43:6b:e5:f8:fa:08:db:c7:aa:
a0:19:1b:1d:b6:d6:43:a2:90:c4:60:89:a2:f4:e3:
7b:de:6c:32:e4:30:d9:8e:3b:4d:4f:28:e4:aa:b9:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:84:6D:0B:A8:D6:7E:D5:1B:7D:F8:18:69:3F:92:3B:58:0F:B8:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fd08ce3-2022-3ae2-91e4-2638a1c60fa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:5d:c5:12:42:17:8b:1b:fd:82:70:1b:bb:fa:73:df:60:37:
26:f0:64:9b:b5:ec:19:37:37:0a:74:29:8c:dd:2f:19:7d:87:
54:ce:1f:5e:3e:09:13:63:23:64:6a:02:8f:d9:fb:27:70:54:
69:3f:53:af:59:bd:61:97:db:30:82:c5:59:33:06:da:08:41:
fb:f9:15:68:d8:69:aa:24:14:17:b5:39:e5:a3:68:f9:ba:bb:
b0:2d:13:c8:c1:9d:ea:e4:09:5e:30:ee:95:b7:52:c9:b0:e3:
76:e0:1f:05:5b:b9:a4:db:b9:07:9d:fa:fb:94:1c:f9:b2:3c:
60:bc:75:cc:69:82:b0:c1:0e:02:29:15:9c:6b:14:86:73:86:
92:b2:a9:ae:02:47:2a:59:e1:f0:04:ab:7b:c4:13:f6:e4:70:
72:e0:e2:0c:0f:ac:42:a0:91:f9:89:fe:1a:11:1f:11:03:80:
03:1f:60:8d:dc:be:ef:60:5c:6b:39:81:1f:74:4e:78:b9:12:
73:45:cb:04:8c:88:16:13:55:ae:03:93:3e:a5:2b:5b:3c:b9:
ac:3a:21:da:46:3a:5f:9b:44:93:1c:4b:a7:08:2f:56:af:57:
c2:9e:b4:c2:66:57:33:d4:ad:00:b5:12:be:b5:6a:7b:be:ca:
9d:af:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:45 2025 by rpki-client