Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dea729d-ae57-30af-baae-b3030923a062.roa
File: 8dea729d-ae57-30af-baae-b3030923a062.roa (raw, json)
Hash identifier: Mm2vnb6VTlfPYsfrc7kIfoG7T6sgsVUsku0qzJieTXY=
Subject key identifier: 91:7D:EE:36:A1:BB:16:B0:DD:B4:81:83:EE:AA:5B:A0:B4:CA:F9:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9BFAB7311EDAA52D6CB27380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dea729d-ae57-30af-baae-b3030923a062.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 32.192.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:fa:b7:31:1e:da:a5:2d:6c:b2:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=6ae3ffe9-3614-4c3d-b611-2d4fa0c1ad84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:68:8b:33:c9:f6:4d:dc:07:28:a1:b0:d3:
f9:0f:91:40:17:b8:e5:79:ac:21:6e:a9:00:ac:cf:
66:a8:19:9e:8d:ed:67:dd:dc:87:a5:75:8e:9a:49:
d8:02:f6:a1:b7:4e:b5:3c:bb:0f:ea:5d:fd:e9:36:
21:dc:05:02:d2:c2:b6:b7:2c:d0:58:f8:5a:9b:09:
81:77:c5:67:05:92:e8:d6:9d:29:41:f7:ba:42:6e:
eb:02:8c:ff:23:a9:2f:d9:98:16:6d:b2:3a:a3:4d:
e1:42:6d:07:c2:c8:ed:81:fe:8b:8e:a2:ab:bc:04:
a8:cc:61:5b:20:cb:8b:44:9f:00:f4:60:63:5f:71:
21:ad:37:12:29:02:ff:0a:64:1c:db:4a:c0:e2:90:
b7:d2:0c:f0:b1:3a:bd:b7:19:d5:18:fa:99:cb:15:
97:82:a9:1e:23:39:34:eb:12:bc:20:be:ea:19:59:
22:bc:98:a5:f1:9c:15:9a:ce:23:94:ad:b7:f6:5f:
33:28:c7:73:fc:16:29:3e:ea:65:dd:bc:65:23:4a:
07:e8:a9:22:8d:6c:a8:1a:df:9f:28:70:4d:6d:87:
08:6b:c7:1c:4b:e2:4a:2f:d6:18:15:87:a6:aa:a5:
d2:98:40:77:d9:0e:92:76:48:d1:d2:77:c9:15:d3:
5b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7D:EE:36:A1:BB:16:B0:DD:B4:81:83:EE:AA:5B:A0:B4:CA:F9:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dea729d-ae57-30af-baae-b3030923a062.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.192.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:1d:87:d6:45:45:28:12:2b:05:b6:e7:8f:0f:55:4c:7c:57:
29:72:8f:56:f6:89:38:d0:51:1b:dd:0c:21:c1:c5:49:8e:39:
75:74:6a:cb:d7:95:f3:5c:a6:60:f5:d9:fa:5f:20:f1:54:dc:
6f:24:97:8d:82:5f:e0:ba:98:a2:cf:ab:c4:58:3c:33:03:eb:
e0:25:53:9e:ee:36:0a:5b:29:1b:49:9d:a8:7c:7b:32:53:2a:
44:85:78:57:5e:97:4e:13:39:d6:15:a6:c7:60:54:c9:b6:2d:
3a:f7:42:52:66:ab:d0:9b:ae:94:18:93:e2:26:b4:39:51:bd:
f3:3d:59:95:24:a9:79:38:23:a3:27:7b:ae:ec:d0:16:c8:be:
8c:09:78:e0:93:08:a9:7a:78:2f:3d:b0:f5:65:23:7a:4d:c7:
7c:37:3d:e7:c2:c8:1f:ef:97:82:de:77:a6:03:2d:1e:4e:7a:
39:4d:11:d2:92:6e:8a:04:1c:20:e5:4c:8b:b4:24:ce:8d:0e:
a9:06:df:ae:f7:fa:f2:6b:f9:a8:7e:8e:08:b0:a4:d9:e3:59:
33:08:c5:9d:22:0a:04:22:54:a4:e4:d8:de:aa:7d:d6:4c:1a:
04:28:af:57:8f:fc:e5:48:d5:2b:a0:76:81:6e:68:24:28:60:
b0:09:5a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:43 2025 by rpki-client