Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99a44105-6888-3209-9ec5-603e2bd2f65a.roa
File: 99a44105-6888-3209-9ec5-603e2bd2f65a.roa (raw, json)
Hash identifier: HGUHeur6ycfSmvIu8MyBZGQy53tmbTp7vMz/5Tduy6g=
Subject key identifier: 11:5C:B2:F9:BF:92:AB:5A:5E:53:40:25:64:17:6E:28:6B:2B:9A:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF87C2580915862287CD3C180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99a44105-6888-3209-9ec5-603e2bd2f65a.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 192.189.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:7c:25:80:91:58:62:28:7c:d3:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=c8496d28-0eef-4639-b8d3-d5a3c92c3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:e3:f4:40:1a:2e:17:6d:cd:55:5a:af:b0:
dc:cb:32:8b:8c:92:f9:da:f4:d9:2f:a6:8a:fd:ac:
9a:92:85:ff:b7:0f:4e:23:c8:b6:c6:7d:fa:65:0d:
2c:f5:96:e6:b0:68:2b:27:47:70:1a:bb:3e:1b:8e:
60:5b:4a:3a:50:2b:1a:d0:53:62:c9:28:60:6c:7d:
a4:74:b8:20:0f:00:86:a4:5a:c4:72:a3:77:5f:bc:
26:10:60:ca:db:b6:fd:82:47:8d:eb:09:a7:76:7d:
8b:ce:ed:4d:90:c1:58:c2:56:a8:97:f0:d1:ee:8c:
f3:fa:79:a7:81:91:3a:3d:4b:bf:35:be:5c:e8:2b:
1a:08:63:68:c1:22:73:bc:2a:a5:96:25:00:09:ec:
0a:31:14:1f:04:95:a1:94:07:94:1a:b2:e1:b8:1f:
9c:82:aa:8d:88:ea:38:d4:95:6f:86:c4:6e:05:8d:
98:18:2c:e9:ee:3b:ff:d9:e5:30:98:53:ac:73:d2:
b5:c6:24:51:42:70:c6:29:f7:26:bf:48:09:cb:62:
c2:28:5b:4c:2f:51:4e:52:12:96:9b:e8:c5:9c:6b:
c3:e1:55:ea:c8:ce:44:a7:40:61:70:2a:c3:03:6a:
2c:1d:d5:1b:af:28:28:ce:91:93:5f:32:77:72:f8:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5C:B2:F9:BF:92:AB:5A:5E:53:40:25:64:17:6E:28:6B:2B:9A:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99a44105-6888-3209-9ec5-603e2bd2f65a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:5d:fb:cb:f5:57:84:cb:2e:f8:3e:9e:5c:95:d8:ca:ef:4c:
8f:f0:2f:7e:fd:98:5b:67:bc:a9:a6:f8:45:05:d8:5e:f5:d8:
9e:e2:1a:14:85:53:61:a4:da:80:81:78:7b:2e:87:d5:5c:82:
bc:f4:4a:85:06:3b:16:33:30:00:33:01:81:47:bf:1f:5b:60:
ad:b0:51:7f:33:c0:bd:9e:ce:57:8f:cd:c4:10:ec:05:4b:ae:
5e:05:bc:f0:95:fc:49:91:aa:36:d2:f2:85:86:24:3e:65:fa:
b0:4f:11:13:37:d4:c9:c1:cb:24:54:9b:8c:5d:9b:7f:fa:b4:
c7:e3:76:b4:0a:51:68:af:c8:d0:bd:8d:90:6f:cf:1f:0b:ad:
98:1a:03:c3:a8:fe:b7:5d:c5:98:48:a2:43:4a:0a:89:91:7b:
15:9b:e8:3a:4a:db:87:20:cd:37:30:9e:d4:64:8f:8f:e5:03:
d6:8a:cd:a0:ad:97:bc:a4:61:94:50:63:33:01:fc:66:26:ab:
82:05:9a:dd:fe:4f:47:a6:46:83:10:77:12:9b:9d:59:c7:4c:
f0:aa:96:dc:13:ae:1f:37:e5:6d:aa:2d:2f:bb:0a:ff:64:35:
c0:b5:0b:3b:52:d2:7a:f3:d1:96:e5:cf:1b:bf:35:50:f6:ec:
bc:a6:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:26 2025 by rpki-client