Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a31abf3-6b3a-3538-a30c-e9ab9b8ba268.roa
File: 7a31abf3-6b3a-3538-a30c-e9ab9b8ba268.roa (raw, json)
Hash identifier: 5Z2+Q9bP/X6f1q3Pm41XOZ9ehAp+oX3EQj3fEx0Dav8=
Subject key identifier: C2:A1:7C:11:A7:B4:71:3A:11:F8:65:BC:71:A3:02:43:9C:4D:1C:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC2E3CF3FF50C4228C34F52C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a31abf3-6b3a-3538-a30c-e9ab9b8ba268.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 22394
IP address blocks: 204.126.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c2:e3:cf:3f:f5:0c:42:28:c3:4f:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=40f03a88-6d2f-4bf6-8068-138cca6b2e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:b9:d2:02:d9:db:05:81:c0:75:36:47:de:
26:15:22:9d:c5:bb:4d:12:21:b5:28:71:e8:d4:83:
76:2b:3e:69:e3:89:ff:da:fe:f0:4b:ff:7d:cc:64:
b4:57:c3:ab:2d:f5:ad:f3:47:71:5a:0e:09:2a:15:
91:18:3d:dc:40:53:75:64:a2:ce:97:75:47:66:5c:
33:ae:81:2b:4e:57:b4:eb:74:84:df:76:2f:96:16:
3e:9d:2e:7c:63:7a:d1:72:d9:26:38:e1:dc:81:fa:
62:4a:63:0c:e7:7c:99:a9:cd:ea:59:d4:49:4d:2e:
9e:c3:4b:e9:cf:78:e1:7d:41:3d:39:e9:27:8f:04:
40:32:1e:bd:a1:f4:f6:41:51:2e:87:a4:da:0c:b1:
6d:3b:c4:5a:1c:53:c5:32:8e:ec:34:f1:6e:26:83:
8b:56:30:b7:14:26:fe:51:a2:d5:34:78:ec:42:4e:
95:c0:34:ee:b6:be:e3:72:44:60:2e:4f:85:76:73:
e2:eb:cf:b4:e3:fc:9b:36:ff:73:bf:b4:d6:f5:2c:
ef:10:50:4d:fb:cf:87:85:bd:89:f2:5d:47:c3:5f:
64:d0:a4:61:3f:fc:6c:47:28:ed:cd:b2:23:53:a1:
81:e9:d3:54:f3:9e:57:e3:ee:95:10:e1:c7:d9:86:
46:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:7C:11:A7:B4:71:3A:11:F8:65:BC:71:A3:02:43:9C:4D:1C:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a31abf3-6b3a-3538-a30c-e9ab9b8ba268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.126.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:25:e4:68:1c:83:89:db:0d:8c:d6:b9:eb:95:e7:af:c7:60:
e4:f4:28:c7:d2:a7:9b:c7:4e:97:1a:5a:b7:58:de:8d:71:c1:
6a:3a:9f:c3:18:48:2f:d4:6a:3a:bb:81:1e:ee:9a:d9:79:20:
c9:bc:5e:69:84:21:32:28:67:b0:69:48:7f:f1:f3:ee:3e:e4:
5b:0a:a0:50:f8:c6:fb:a4:4a:2d:d8:66:74:0c:ca:8b:52:4b:
62:ae:1f:4f:32:99:c9:17:e4:5b:85:51:06:5a:f2:14:77:35:
22:d7:7e:95:95:d3:84:02:78:81:91:b5:7c:0d:8b:cb:67:cf:
4e:25:05:d5:ac:9a:d4:d1:c2:7b:3c:ca:76:f7:39:42:43:33:
35:53:ae:53:a1:ad:3c:44:77:e1:7d:8c:bd:a9:07:94:56:03:
10:ed:28:dc:67:cf:7b:18:1f:60:96:77:af:cc:ec:a1:d7:d6:
74:28:0e:5c:c8:0e:2c:f3:12:24:05:fb:a7:b4:cc:87:4b:ea:
8a:92:57:3d:5c:5e:3a:9d:91:e3:31:80:1f:ca:1f:ea:c4:91:
b1:73:ac:70:14:12:3d:17:f1:44:59:fd:29:ca:6b:b6:ac:f6:
9e:ae:bc:6e:57:aa:ef:c3:fd:56:0d:62:dd:0f:44:c4:20:9e:
eb:33:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:50 2025 by rpki-client