Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/989342e1-8cbc-304e-a2ea-3564de70be7d.roa
File: 989342e1-8cbc-304e-a2ea-3564de70be7d.roa (raw, json)
Hash identifier: NTF5l415mk7gWzV83FCVyjckbOVyoXTixnHzZ/skNfA=
Subject key identifier: 01:F7:11:74:0E:0F:67:6F:63:5A:36:A6:FA:29:8C:C9:83:B9:C9:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840350F3FD104D4AEBF52010080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/989342e1-8cbc-304e-a2ea-3564de70be7d.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.157.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:0f:3f:d1:04:d4:ae:bf:52:01:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=ad6fbce7-df6f-44df-8584-88f86aaa3caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b4:08:5e:67:95:b5:cf:cc:7c:51:06:7f:24:
ae:78:bc:26:71:e1:5e:5e:0a:26:1c:d6:2e:f4:a1:
74:14:1b:99:d0:3b:8b:a2:74:69:e1:4f:bd:2c:5a:
a3:23:42:a0:92:34:67:33:ac:57:37:97:f7:38:83:
8d:51:bd:83:46:34:23:01:99:9a:b7:19:a3:46:8f:
75:44:75:ef:8e:43:0c:2c:ff:9e:52:78:23:64:da:
1f:2c:27:e8:39:20:e1:9a:78:66:99:63:51:c1:b3:
85:21:a0:47:6f:b1:59:b9:c3:12:0e:63:b1:c8:08:
b7:50:ac:ee:c5:26:ac:9a:dd:c0:96:59:b6:96:0a:
3b:c0:1d:7c:54:e2:7e:c3:40:1c:95:ee:8d:73:54:
92:f5:a4:33:32:a4:ee:d8:b5:ce:fb:d8:5b:02:69:
e7:0a:81:de:96:dd:c7:3a:38:52:9d:6f:c5:d8:b7:
50:4b:21:b4:12:b9:56:fe:fb:78:fb:ec:8b:cc:dc:
43:32:85:cd:52:32:99:60:46:c0:94:54:9a:6f:e1:
d0:12:62:de:b8:d0:5d:ad:85:68:e8:5d:b1:69:8b:
e8:fc:13:1a:3a:89:31:80:93:4f:9f:65:f3:9d:c4:
c8:45:d8:53:3c:56:0d:46:62:00:1f:4b:0e:50:3e:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:11:74:0E:0F:67:6F:63:5A:36:A6:FA:29:8C:C9:83:B9:C9:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/989342e1-8cbc-304e-a2ea-3564de70be7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:c7:e3:0a:ca:84:ac:1c:fd:f2:5d:4f:66:5c:74:c0:9f:f3:
e9:52:70:b7:20:0d:63:ad:dd:03:c7:41:d5:61:9d:de:92:e1:
28:f9:ce:cb:42:8d:e6:79:3f:42:e2:2e:3d:a1:a9:11:dd:ff:
84:0a:cb:f8:fb:84:bf:b2:9d:6e:17:31:84:23:0e:55:89:ac:
52:8e:f7:77:70:11:e1:91:1d:77:fa:cb:1b:13:71:00:bc:aa:
66:97:35:85:05:c7:ea:cb:d4:61:fa:a7:53:69:38:69:59:f2:
99:65:eb:df:a3:77:9d:d7:d9:7a:e7:02:f4:50:5d:65:a2:68:
35:95:7f:a1:05:92:54:86:52:00:46:7e:a0:5f:5e:6e:1d:ce:
8b:df:9a:ad:41:8d:66:09:81:cd:e7:ac:86:82:62:05:89:c3:
09:1b:bf:8f:31:95:3c:63:59:2f:e8:fc:d0:db:4f:fc:85:35:
64:60:bd:71:85:64:90:0b:48:57:c7:24:2d:ef:46:15:2f:32:
7d:96:aa:b0:14:7d:36:4f:9d:6a:c1:e6:d4:cc:9e:08:30:48:
d3:c3:d1:b5:ed:3d:b4:43:e6:2b:08:a4:74:45:d7:00:7d:86:
5d:1e:16:0d:a7:ea:5a:da:bc:31:4f:5e:61:29:90:00:6a:d1:
00:76:ef:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:38 2025 by rpki-client