Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/920b53b7-a593-3d1e-adad-3f5dc4a2707b.roa
File: 920b53b7-a593-3d1e-adad-3f5dc4a2707b.roa (raw, json)
Hash identifier: yTyaILW2ucTX/RvPJZMl+CgZsTFOYZCzvbjAwgfF7yQ=
Subject key identifier: A8:B8:19:E0:B9:11:D2:6D:69:5D:43:3F:EB:41:A9:0D:0B:C7:C7:61
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584086F37B1417B7F36E29FAC200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/920b53b7-a593-3d1e-adad-3f5dc4a2707b.roa
Signing time: Mon 09 Jan 2023 12:00:00 +0000
ROA not before: Mon 09 Jan 2023 12:00:00 +0000
ROA not after: Tue 14 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 32.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:86:f3:7b:14:17:b7:f3:6e:29:fa:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 9 12:00:00 2023 GMT
Not After : Feb 14 05:00:00 2023 GMT
Subject: CN=616ad317-1029-4d4f-80f5-5f54d6f9a0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:26:9b:f6:22:e2:75:1b:21:84:cc:19:65:
10:fb:40:b5:8f:c9:a7:c3:fd:0c:e1:56:9a:5f:45:
4c:dd:a3:b9:4d:5d:3c:d2:64:ed:aa:b3:55:11:67:
fe:b5:b8:18:92:ff:2b:0b:d2:74:63:a0:4f:4d:53:
13:c6:e1:d0:d4:59:fc:36:04:57:f1:82:42:10:2c:
7e:3f:bb:d4:74:78:78:e9:81:0a:dd:ae:4c:c1:43:
51:90:b0:dc:20:e5:3b:b3:ed:b7:80:b2:7e:6b:a3:
82:ac:9f:e0:2c:65:8e:f5:ab:28:cb:73:6c:d8:62:
1d:48:2c:67:42:30:aa:82:44:29:66:fb:26:40:83:
0f:c1:ca:94:29:34:62:1a:d2:7f:78:f4:e1:6f:fc:
c2:c8:e8:0a:45:ac:5d:48:df:d5:63:c6:3a:02:44:
e3:c1:b9:80:96:00:73:74:cc:18:ed:18:3d:41:d5:
88:58:df:c3:f7:cf:e5:05:b7:a5:0e:11:66:76:f6:
72:59:d9:fc:3c:32:84:31:af:7f:a1:e8:4c:5d:28:
57:c9:fa:97:07:63:8f:5d:3a:f4:6d:ab:54:35:06:
f3:db:4a:42:7e:e5:f1:c6:c2:1d:1e:4f:9c:4a:50:
50:aa:5c:3b:e9:bc:23:f1:5c:23:8f:cb:a6:82:b7:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:19:E0:B9:11:D2:6D:69:5D:43:3F:EB:41:A9:0D:0B:C7:C7:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/920b53b7-a593-3d1e-adad-3f5dc4a2707b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
32.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:6f:4a:61:63:26:4d:2a:65:ce:21:33:e3:92:4a:b2:8a:2f:
f8:0f:ff:ab:ea:c8:16:67:d8:aa:f8:cb:40:d2:6e:a5:35:c7:
21:1c:02:8e:27:70:5c:63:da:df:ef:0b:eb:a1:8e:fc:4b:7d:
c7:f1:07:c2:18:b2:40:07:53:ce:02:40:b5:96:be:3b:95:be:
b0:9b:47:20:75:16:9f:13:45:fa:a7:13:1c:03:13:73:67:7c:
64:ea:7b:e9:b8:00:09:d6:4a:78:d8:4a:58:a3:0a:cd:ce:0c:
ff:77:2f:9c:09:00:1d:2f:65:cc:83:9d:d2:91:eb:3f:58:6b:
0a:43:04:15:ce:e1:5a:6f:50:63:5e:a5:54:fe:5b:d1:a7:28:
16:0f:29:65:b1:76:30:38:2b:0a:01:be:14:60:24:02:5f:14:
10:70:66:9a:ae:c9:83:0d:1e:e5:40:b8:b8:ba:39:4e:e4:a9:
5c:f4:38:57:93:22:6a:e0:20:02:6b:87:04:24:02:26:e0:15:
f0:d1:63:92:5e:1d:c3:52:94:0e:9b:d2:2e:e8:6b:99:9e:8b:
ba:0f:b4:92:52:9c:9e:f0:de:17:c1:28:59:cc:f8:67:1c:36:
ef:22:2d:08:fe:18:af:05:36:27:39:bd:8a:e6:08:e2:89:ad:
27:42:b4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:51 2025 by rpki-client