Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aaeb456-3d9c-3a6c-83a1-cb37a257cbfd.roa
File: 7aaeb456-3d9c-3a6c-83a1-cb37a257cbfd.roa (raw, json)
Hash identifier: iECC20Xe0D6u6gagpw5oU6+E0HHZpwyKS9mJB8hgg7M=
Subject key identifier: CD:FE:5F:93:2B:80:7A:9B:B2:73:A2:82:AC:19:F9:23:83:44:62:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F386FD89029CFD26DD6EB04C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aaeb456-3d9c-3a6c-83a1-cb37a257cbfd.roa
Signing time: Sun 11 Sep 2022 12:00:00 +0000
ROA not before: Sun 11 Sep 2022 12:00:00 +0000
ROA not after: Mon 17 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 192.31.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:38:6f:d8:90:29:cf:d2:6d:d6:eb:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 11 12:00:00 2022 GMT
Not After : Oct 17 04:00:00 2022 GMT
Subject: CN=1b7729d7-65e9-401a-a60c-383cd5713ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:53:3c:3a:8c:2d:7d:89:c4:84:60:be:3e:
1c:f3:53:2b:b0:3e:3a:c7:d6:6f:3f:0c:44:55:17:
0d:8b:13:72:8a:5d:8c:8d:c8:44:16:c2:5b:b4:99:
43:94:35:ce:d0:11:a1:2c:0b:cc:de:c3:78:5e:f8:
13:ee:5a:00:81:30:a8:ba:65:16:69:2a:50:86:e2:
fe:45:aa:95:79:91:f6:19:8c:25:d1:5c:3b:79:68:
9e:4b:cb:94:59:00:57:0b:9b:31:4b:68:ad:10:47:
b3:3f:82:7d:f5:68:b9:16:b8:d2:20:06:7a:56:26:
f9:3f:be:0f:ae:36:b1:7e:16:e1:0e:0c:e1:7b:14:
7c:76:35:c1:61:24:81:ff:fa:12:b4:9e:88:0c:97:
0a:a6:c5:0e:13:cf:56:33:04:f6:29:66:85:74:ba:
04:e4:72:13:f3:d1:1e:db:93:2e:90:a7:bf:73:95:
dd:05:d0:33:76:ea:c6:fa:ba:5f:5b:7b:62:06:f7:
3b:3d:57:10:0a:46:ee:3e:41:54:08:9f:02:0b:2b:
2a:68:91:9d:12:3e:4b:7d:4d:c9:d5:a8:34:53:7a:
10:8d:f7:4e:bf:b8:f4:e8:69:29:c7:1c:5c:2b:4e:
07:4a:70:dd:60:4c:a6:e2:88:06:64:ca:43:4b:a5:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:5F:93:2B:80:7A:9B:B2:73:A2:82:AC:19:F9:23:83:44:62:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7aaeb456-3d9c-3a6c-83a1-cb37a257cbfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.31.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:71:e0:8e:f4:d2:93:40:7c:de:f3:cf:81:f8:51:73:94:09:
3d:19:d5:67:3e:8f:e7:9b:2c:32:34:b9:8e:9f:9b:41:cb:d0:
56:4f:28:db:b5:46:43:fa:6e:7d:ae:b7:ce:20:6a:5e:c0:eb:
7a:5d:54:8b:d4:21:84:14:95:56:22:59:78:17:25:6d:82:80:
15:92:fe:bb:d5:b3:68:d9:2d:66:04:a6:2d:7d:9d:a2:5a:7e:
b5:6a:9b:9d:bc:fd:30:34:66:b9:8a:94:a0:fc:ad:77:9f:34:
4a:eb:47:63:3c:2e:10:a0:3a:9d:88:4d:23:cc:2e:d2:55:26:
94:0f:50:df:49:de:4c:8f:bf:6f:ec:55:d6:07:e5:b3:03:a6:
3e:5e:79:20:c9:9d:c0:50:e2:ac:8a:cf:61:de:b8:f1:cf:8c:
ce:b6:23:dc:df:93:4f:9e:8a:eb:7c:1f:a7:cd:ab:60:6c:e2:
9f:8c:ec:6c:ff:00:00:00:ba:15:c8:a0:80:3f:3e:c1:d1:2c:
ed:00:27:8f:b8:f7:b5:94:13:8f:c8:e9:39:fd:e4:ba:92:31:
7c:ba:91:3c:82:0d:53:36:0b:e0:46:2e:43:a3:c7:84:33:c1:
b4:87:f5:d7:7f:bb:91:d7:bf:dd:b3:6f:33:46:cf:a7:b5:aa:
02:9a:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:11 2025 by rpki-client