Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82ef65db-9a3c-31a2-99c0-f6f5ee245448.roa
File: 82ef65db-9a3c-31a2-99c0-f6f5ee245448.roa (raw, json)
Hash identifier: ZSjE05xaG6HPXdwg3ptSusSsDJcCRp7eXvJZmdYfTUc=
Subject key identifier: 9D:D7:F7:C4:79:F4:28:8D:61:BF:89:36:67:3B:BD:A8:6E:28:F5:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584021937C8CE1073716BCC69120
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82ef65db-9a3c-31a2-99c0-f6f5ee245448.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Mon 09 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 192.43.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:21:93:7c:8c:e1:07:37:16:bc:c6:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Jan 9 05:00:00 2023 GMT
Subject: CN=87eb0dd0-8f02-49bb-ac2b-0793f0b8c977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:69:61:1c:e2:f9:41:a8:78:4c:10:a8:80:d4:
1f:3f:29:2f:09:02:0b:bf:cb:09:d1:15:21:81:4e:
6a:f8:cb:4f:b9:f5:65:18:fb:e0:04:36:68:d3:a0:
b9:42:5c:a3:1a:18:aa:b6:9b:3a:9c:66:43:d8:ee:
e0:18:f0:6b:c3:5e:f3:14:0e:58:c1:3e:ee:b0:83:
ca:c7:84:72:00:6f:ed:ad:ae:78:b1:ac:6b:62:60:
b7:b2:0b:80:27:00:38:3c:c6:c8:9e:2d:a9:43:a1:
60:4f:91:d3:97:a6:91:62:f9:81:6f:1a:cb:0c:b1:
e2:10:b2:68:0b:12:d2:71:e9:3b:7f:f7:98:39:4b:
b4:09:ff:33:b5:88:0a:46:27:fc:a4:d4:ce:91:aa:
bf:45:6b:48:71:a8:8c:30:11:f7:cb:01:76:80:75:
ea:7a:44:c4:57:33:21:c1:b9:76:f2:5f:31:5c:e6:
08:2d:20:e8:3e:ea:d5:74:d9:2a:37:c1:35:90:27:
2e:c6:ea:7e:8d:bd:cc:4a:f9:d1:a9:aa:b3:7e:51:
d5:31:a7:85:b0:32:90:a8:b8:d2:33:9f:6a:6e:14:
76:1e:6f:c8:17:86:54:0f:ac:00:1c:80:ad:5b:d5:
a7:db:e0:53:d2:cf:d6:57:86:3a:54:e7:3d:89:f1:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:F7:C4:79:F4:28:8D:61:BF:89:36:67:3B:BD:A8:6E:28:F5:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/82ef65db-9a3c-31a2-99c0-f6f5ee245448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:30:55:ce:6c:ef:1c:38:fc:5d:af:b6:d1:29:ec:53:c2:74:
d5:3c:95:1a:dd:1c:ca:e5:02:1b:dd:ac:62:dc:34:73:83:00:
8b:29:a0:50:8d:7b:62:9d:f9:fe:22:e8:4a:75:f1:e1:da:3c:
70:29:a6:a8:4f:d6:62:40:13:3d:97:fe:e7:55:cb:17:06:4d:
1b:0d:8a:8d:0d:55:72:1d:15:06:ce:99:1b:26:ad:d6:81:14:
59:af:a3:d7:2b:e3:64:fc:7e:3d:d6:7d:e4:51:00:b7:30:af:
e1:a5:f9:04:25:b2:e4:67:94:3c:97:e0:86:4c:ed:55:4a:bb:
69:04:18:73:8e:7c:3c:39:0d:2f:e0:fd:cc:2e:b0:57:f0:06:
88:66:63:4e:00:60:bc:01:e3:a9:73:f9:88:83:1d:5d:a6:58:
3c:a3:7a:94:95:5d:4a:6f:31:fc:7c:05:e3:1f:c1:ad:a3:a1:
fc:5e:f5:11:47:d4:d6:46:46:6f:b5:b6:df:1a:98:25:30:0d:
e7:8a:02:f9:e1:6d:93:c3:bc:7b:92:fa:c4:c4:42:e0:6a:d4:
8f:23:32:c9:32:f2:cd:02:ad:8f:ac:3f:7d:97:a1:46:ad:e3:
21:39:71:8c:e8:90:bd:36:c8:b0:16:86:a1:f1:a5:07:95:c4:
3b:1a:93:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:32 2025 by rpki-client