Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/645cebff-2177-3984-b419-a8d727256e2c.roa
File: 645cebff-2177-3984-b419-a8d727256e2c.roa (raw, json)
Hash identifier: OT4KhqqASuJj4YdETZ2l6DnJak3Addgp5/rLufiPb38=
Subject key identifier: B1:DB:50:FB:87:F2:A4:F5:CE:AE:49:2F:A9:F0:38:F0:D1:CE:AC:1C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF6E49A983926B7CE22409900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/645cebff-2177-3984-b419-a8d727256e2c.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f6:e4:9a:98:39:26:b7:ce:22:40:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=e39c7793-6bec-464e-a11b-69aac6597474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:1f:6f:6a:2e:a0:19:ca:23:64:b0:4b:41:
3a:63:45:d2:b8:9b:cf:10:03:64:14:7c:c2:ca:4b:
15:6e:0a:a0:ae:6d:d4:3c:df:b0:3a:ea:6a:66:db:
6c:cb:40:43:ba:19:72:1b:0f:04:6f:e0:4d:15:07:
e1:40:dc:67:2c:20:06:9c:97:c2:57:a2:c1:d8:61:
5f:81:e2:68:6f:89:60:4c:20:0b:9a:6a:9c:1b:96:
b6:25:25:e7:b6:33:37:db:a5:70:9f:c4:3e:a6:a2:
1e:2d:22:12:d7:5c:5f:55:e6:f3:c0:11:96:c2:10:
3b:c1:94:fd:86:45:bf:46:38:02:3b:54:d5:3e:a0:
57:ab:77:7c:26:36:66:06:ce:ca:09:3a:20:c3:1b:
68:92:b5:28:e0:ca:7b:10:cf:a3:41:0b:28:b6:88:
2e:a9:b7:34:43:f6:cc:61:03:aa:e5:4e:da:3b:69:
15:fe:9f:4c:a9:74:60:eb:8e:f5:a2:46:7b:b4:ea:
dc:b1:77:fa:d6:78:91:ae:27:f7:24:64:2c:29:ff:
06:7c:61:fc:89:40:18:de:de:97:ce:b4:43:4d:cc:
5c:c5:e9:5c:ed:b8:6b:57:18:39:e9:54:4a:c0:85:
8a:fe:17:45:01:4b:ee:48:eb:54:95:c3:69:7d:83:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:50:FB:87:F2:A4:F5:CE:AE:49:2F:A9:F0:38:F0:D1:CE:AC:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/645cebff-2177-3984-b419-a8d727256e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f6:59:9c:a9:f1:8e:cd:46:13:15:14:2a:dc:5b:cf:76:7d:
7d:e4:02:c0:e7:d3:a5:b2:f4:80:a9:37:b8:0c:a8:b5:35:db:
12:be:46:41:80:d3:65:f8:44:c4:2a:35:ee:dd:e3:dd:e4:7a:
71:29:8c:42:98:34:6a:e8:c6:b9:6f:16:f4:bc:20:f7:11:56:
df:42:d1:3e:96:77:3f:01:da:ee:8f:23:b0:46:ef:52:04:0a:
0c:a2:41:52:ce:8d:b9:06:20:0b:0f:29:fa:16:89:96:30:82:
02:2d:70:26:8c:de:54:f8:82:20:b5:53:c4:02:b4:d3:b0:63:
c4:d6:7d:0d:41:f1:22:2d:00:fc:bc:66:78:fc:50:0a:0c:3b:
22:2c:02:9f:55:d8:c0:f7:18:58:31:dc:bb:e9:a2:12:6a:3c:
0b:c1:92:35:6a:b3:80:4e:ce:7d:49:65:ca:b2:ed:59:f4:c7:
b6:f9:ed:13:e8:38:a9:65:91:a9:05:c3:fb:a3:5e:42:dc:1f:
00:8d:b1:63:90:28:43:4a:9d:d2:a8:b9:ff:cc:92:3d:a1:24:
81:dd:bc:14:26:5b:3c:a8:cc:23:22:94:54:5b:1c:84:d1:af:
e1:8a:28:8b:b3:6d:d4:81:ac:74:5a:a9:de:3a:09:80:a1:dd:
c9:09:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:08 2025 by rpki-client