Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ad01f94-6eef-36a1-b7b8-a5656c9ac148.roa
File: 9ad01f94-6eef-36a1-b7b8-a5656c9ac148.roa (raw, json)
Hash identifier: 7T22sEQwQzuIrB4pHrOP56b49zkjJUbPbszO4kAL2d8=
Subject key identifier: 17:89:F9:C7:AE:BC:12:29:39:9F:33:D3:07:C8:E3:C3:2E:4D:C0:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401D2034E5373C4096EFAFFE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ad01f94-6eef-36a1-b7b8-a5656c9ac148.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:20:34:e5:37:3c:40:96:ef:af:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=20697d27-5003-44ab-9b18-581eacd545ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5a:d8:1e:0d:5d:7d:05:b1:12:85:43:dd:ee:
f0:33:d2:d3:ea:0d:0a:75:8c:37:11:7d:82:a1:dd:
d1:72:59:61:54:e3:05:1d:66:15:a2:ac:4e:e3:b6:
69:17:56:9e:18:25:d1:25:11:f5:11:7a:78:20:16:
c2:b8:af:4c:17:12:11:b0:cd:72:1e:16:51:8c:25:
82:20:a1:0b:28:fa:08:84:fd:e0:c5:47:c3:48:73:
e3:a3:ef:7f:a8:9d:11:1d:c8:e6:7b:03:25:08:00:
2f:f7:76:11:83:9a:86:67:a7:64:56:f5:00:e5:7b:
e9:bc:02:d6:42:a5:67:5a:fb:00:0b:26:a7:7d:50:
77:93:19:34:54:35:15:ff:1b:e5:4c:b2:46:2c:a8:
1a:bf:e2:45:22:aa:11:ad:88:64:5f:86:7b:f3:b2:
97:63:ee:96:21:69:fb:43:77:3b:34:9b:f6:41:9f:
40:ef:35:82:ea:1e:8d:0e:6d:28:e9:04:af:f2:81:
b6:df:37:bd:a8:54:c4:a8:25:38:c1:f7:1a:b0:c0:
30:d1:85:9f:ee:df:2f:a9:9a:52:60:e6:7a:a7:4f:
00:59:68:d1:8c:46:e5:ef:a0:ca:25:86:d6:a3:d3:
a8:7a:c0:7d:dc:09:60:16:3c:21:78:05:c0:5b:d6:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:F9:C7:AE:BC:12:29:39:9F:33:D3:07:C8:E3:C3:2E:4D:C0:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ad01f94-6eef-36a1-b7b8-a5656c9ac148.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:3a:c4:5d:8a:d6:bf:a7:cb:92:0f:20:41:f0:f1:92:0d:0e:
e3:70:ae:ad:74:8e:e4:4d:75:a3:8c:1f:d4:bc:f0:25:14:3b:
eb:db:32:cf:22:10:f4:c9:06:5f:0c:56:b6:5e:83:96:c0:c3:
52:6e:b5:12:07:bb:35:b9:4c:87:a4:83:71:c5:0d:43:42:b3:
41:63:b9:55:4f:44:1e:16:7c:91:d8:a0:79:77:8e:c2:5c:aa:
82:42:bb:8a:f7:7c:b1:39:95:c8:9a:1f:48:b2:5e:03:d4:38:
69:e6:77:25:f6:fb:b3:fc:40:dd:39:8c:66:68:44:c6:45:df:
80:aa:12:20:09:26:1b:9a:72:a7:55:30:76:7a:cc:76:70:2c:
19:69:3e:83:6f:40:b9:2e:36:a4:50:e7:b2:aa:7d:c7:4e:eb:
07:b4:ec:f5:0e:09:fc:bd:15:5c:1d:26:00:65:a8:02:69:b1:
18:f6:2d:66:95:d0:0b:8d:5c:e1:99:f9:79:2d:d2:0f:ef:a4:
09:39:61:85:4d:2f:85:cc:0b:d5:a8:dc:49:65:c9:54:02:36:
8e:ce:f9:90:4e:5d:23:b3:f0:30:ce:09:d3:3c:90:02:3b:1a:
9f:84:a5:61:c4:d2:38:19:b8:97:99:7c:3a:13:e0:e6:fc:5f:
57:c2:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:05:46 2025 by rpki-client