Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae24fc56-98bf-3526-834d-966c21f95872.roa
File: ae24fc56-98bf-3526-834d-966c21f95872.roa (raw, json)
Hash identifier: Jaa67/ki/f+5DT8t+a4WNYKQ30qUZ8gIbdk+W6vfjN4=
Subject key identifier: 80:78:94:80:56:72:A9:04:2E:43:B2:98:8B:C9:AB:C2:B7:7D:54:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE537B21E48952B87DDA345A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae24fc56-98bf-3526-834d-966c21f95872.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:37:b2:1e:48:95:2b:87:dd:a3:45:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=3cf06ffe-a140-4885-9d4a-9cd9263c53dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:f9:e6:97:c5:3b:c2:af:ab:1c:88:ed:d4:
bf:72:8f:d8:06:4c:de:0d:41:c2:da:36:6c:4b:e3:
6a:3a:cb:4b:60:1a:35:35:ac:21:cd:e5:1c:46:0f:
dd:8f:41:0e:77:26:25:45:c2:cf:1c:7b:c5:49:39:
f5:9c:a1:04:fb:be:a1:af:18:23:98:a9:4d:05:0e:
37:d3:ec:a7:1b:31:82:15:46:24:55:34:03:d9:40:
b3:4d:8c:28:9a:24:87:d3:05:42:91:d7:a0:cb:a6:
50:6e:60:e7:aa:6d:37:48:2e:0c:01:45:ee:74:c0:
4a:15:02:26:96:6d:0c:98:1c:d0:d5:70:7d:32:e6:
99:ce:dd:77:26:ed:9c:cd:34:13:f2:09:50:84:93:
db:5f:16:0a:17:65:4b:bb:85:9f:67:d0:a8:b6:c8:
c3:3b:bf:59:74:c9:f6:b6:dc:ed:d5:4b:be:8a:b3:
bb:f1:9f:3f:67:d6:ec:6f:f2:d0:a7:6d:03:15:33:
44:74:f0:c0:ce:a1:f2:6a:2f:f7:9e:75:3e:d4:65:
3d:b5:f0:ad:50:92:1a:41:d8:39:1d:99:6a:b2:d0:
c6:3b:b9:62:2f:c8:15:b7:ed:5b:74:0c:1b:dd:44:
64:2e:85:c5:19:e8:7c:05:44:42:83:8c:ab:6e:5f:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:78:94:80:56:72:A9:04:2E:43:B2:98:8B:C9:AB:C2:B7:7D:54:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae24fc56-98bf-3526-834d-966c21f95872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:72:c5:36:c9:ba:9e:40:85:74:3e:12:dc:58:d5:3c:f7:54:
9c:a5:9f:22:eb:13:c7:5d:c6:09:e8:dc:db:8c:3f:fb:b2:a3:
e9:b7:13:cf:78:35:89:db:07:28:b3:b9:80:1a:e9:b7:31:de:
16:a8:c2:d2:1c:2e:d3:16:a5:24:f8:7f:fc:cd:f4:4d:06:dd:
4c:f6:29:82:25:60:02:ea:b9:18:d6:fe:3c:da:0a:94:15:1b:
97:a4:c4:90:2b:1d:3b:46:d8:ec:59:ee:28:fc:fc:86:5e:7a:
2b:1e:83:09:e1:22:38:0c:bd:4d:33:28:ad:28:37:90:01:79:
e6:d0:67:dc:ae:54:52:d0:28:16:cc:57:da:e6:80:40:61:ef:
07:b4:35:41:d5:56:48:9a:3f:75:a3:7a:f6:cf:15:42:d1:5b:
fc:41:f2:47:2a:3c:7d:30:dc:8c:ec:4b:ab:a4:b2:52:50:8f:
f1:13:06:5f:b1:50:3c:d1:44:28:64:1e:64:18:53:46:90:bb:
27:63:64:fe:a0:c6:8a:75:ce:70:f9:3a:04:af:6e:96:ed:9b:
e7:20:2e:72:17:a3:d3:68:72:0c:c4:6d:f4:11:a7:69:1b:c3:
f5:90:ea:00:e6:0b:1f:32:f7:58:7b:42:2f:90:0c:15:0d:10:
32:53:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 01:39:07 2025 by rpki-client