Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/725b75c4-c180-3f1a-ada7-fc0944bf901a.roa
File: 725b75c4-c180-3f1a-ada7-fc0944bf901a.roa (raw, json)
Hash identifier: wBrEAEJZPZKTwbemYNusB9ug0Jugw0rLQn7jn5Of9kI=
Subject key identifier: 0F:D3:CA:A5:0B:28:C2:F9:8F:1D:31:28:77:0C:B2:C4:F6:00:15:5E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840435DE9DE52D4FF6E429B5FF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/725b75c4-c180-3f1a-ada7-fc0944bf901a.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.189.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:5d:e9:de:52:d4:ff:6e:42:9b:5f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=e487c54a-b177-4b59-83cd-b150f511f10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:d2:73:65:36:80:ab:d2:e3:72:87:45:df:
a2:e3:34:04:3c:7f:92:ee:04:53:33:f6:2d:96:ae:
cf:1c:b0:27:c0:bf:a1:53:38:91:03:cd:7c:bd:e7:
09:c3:a8:b7:db:78:f6:2f:ae:dd:97:26:fe:65:0f:
02:7f:69:da:4d:a1:1c:82:fc:e7:84:8d:db:50:5b:
49:ef:59:b2:61:cb:fa:99:e3:e9:93:9c:7c:90:6a:
04:d1:ae:80:30:aa:d1:30:4e:94:c5:4a:0a:dd:79:
07:dc:d8:e9:81:14:cd:9a:1a:47:53:4c:22:5a:f8:
4d:e6:a2:17:14:2a:a3:15:7c:6b:c2:73:81:d4:8f:
31:c0:db:6d:cf:40:d6:64:c3:04:63:67:29:b0:ba:
d0:4d:be:21:59:7d:d8:ed:1a:eb:c5:78:75:b5:14:
c4:31:04:56:b5:47:0f:74:f0:f4:d0:7b:f0:8f:21:
64:86:1a:bb:b4:43:6f:e3:1a:ad:43:94:ad:45:a8:
64:8d:e6:e7:22:dc:e8:05:2c:0a:ab:e3:bd:1a:b2:
5d:90:00:57:a1:d9:02:3a:bf:5c:d5:00:d5:36:50:
48:9f:37:14:42:18:e9:ac:32:88:40:01:a1:76:46:
bf:35:fa:5c:fa:65:1a:99:c4:12:71:78:09:dd:17:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:CA:A5:0B:28:C2:F9:8F:1D:31:28:77:0C:B2:C4:F6:00:15:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/725b75c4-c180-3f1a-ada7-fc0944bf901a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:29:c3:f9:38:95:21:8d:8d:83:bc:a6:98:17:fc:03:78:0f:
04:8b:20:9f:7e:58:8e:3f:f9:d2:4a:ee:04:5c:d0:23:15:0d:
4e:48:8d:f3:09:f4:e7:e0:e2:94:93:1a:5f:eb:87:85:fa:77:
0c:bb:c6:70:f6:dd:b8:fe:3b:34:4b:c4:42:eb:9b:bb:f7:42:
bf:47:39:f2:aa:dd:21:0f:e7:0d:3d:43:cd:1e:76:1d:f3:ef:
f0:6f:81:29:96:6e:51:3e:8f:67:90:01:b9:b1:3a:8a:1a:32:
fc:e9:89:8f:12:69:4b:fb:d2:bd:16:99:35:3b:40:85:3e:19:
f9:73:61:2d:2e:71:82:01:d0:9d:16:93:ee:d2:a4:d8:6d:b8:
11:f9:15:7b:87:0d:6b:33:7d:a8:75:13:94:65:57:12:a7:7b:
9f:6c:8b:cb:ea:d1:95:48:ec:79:49:91:2b:1a:6e:17:25:f9:
f5:8f:0c:17:d1:e1:80:2d:33:af:1a:99:a2:b7:51:81:56:e5:
ee:4f:28:db:c3:ba:d3:3e:ae:89:79:b7:ed:ea:c6:9d:e9:92:
96:a5:d0:01:50:69:8e:e4:8c:c4:1b:d6:ad:f8:89:a3:cc:2e:
89:55:39:b5:f2:f8:90:5e:65:3e:56:3c:f8:5e:18:1e:45:b2:
7b:93:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:16 2025 by rpki-client