Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af11009c-c82d-3e9d-96e4-957b298596a2.roa
File: af11009c-c82d-3e9d-96e4-957b298596a2.roa (raw, json)
Hash identifier: gYJq9a0NVwtmPmjzRGKMWEJD55+ufpvetVv4rMQyiXo=
Subject key identifier: 9F:E9:4F:CA:0F:1E:8D:D0:7F:EF:48:22:0E:B7:1D:78:B9:F2:CE:11
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E94F2261377019656A78FD900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af11009c-c82d-3e9d-96e4-957b298596a2.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 192.189.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:94:f2:26:13:77:01:96:56:a7:8f:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=3ddd6730-11c7-414f-98ac-01461ed421d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:29:be:84:35:43:5b:5a:93:7c:62:e1:0c:
8a:fe:d1:84:f1:14:4e:b7:9d:6e:0c:67:d0:49:91:
0f:69:bb:c1:ad:4d:20:30:77:87:ea:85:c7:dd:d5:
51:52:86:21:41:b3:75:e7:7d:9f:79:b1:d2:88:4f:
48:d0:28:c2:ec:a8:b2:d0:41:07:86:61:4d:9a:d2:
92:71:4d:e6:6a:6a:92:41:6c:70:c1:b0:d3:22:db:
25:65:9b:2e:9c:6a:d4:d5:7c:35:83:7a:1f:61:fa:
86:62:93:22:49:70:fb:50:c9:6b:47:4a:06:22:b2:
59:74:46:a0:2a:3a:d9:28:c2:a9:07:88:ca:7a:f6:
ea:b6:32:d7:bd:6e:9b:14:4a:81:4e:50:db:80:84:
81:6e:4e:1a:4a:8b:a8:0b:b8:79:ed:b2:27:1d:d2:
b1:8a:90:a7:7e:65:dd:7d:dc:48:0d:94:7d:1a:13:
8f:c5:d2:f4:7b:25:2c:93:e5:c3:42:61:44:9d:78:
9c:2d:3e:18:ab:d6:12:9a:13:07:8c:81:5e:f8:0b:
da:8f:ba:62:84:8c:c2:81:c9:6c:87:2f:bd:cf:61:
d3:da:58:5b:91:8d:36:bb:b1:27:b7:b4:92:09:d4:
14:5d:e8:34:b2:f2:ad:22:d7:d6:ff:99:43:c5:c4:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:4F:CA:0F:1E:8D:D0:7F:EF:48:22:0E:B7:1D:78:B9:F2:CE:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af11009c-c82d-3e9d-96e4-957b298596a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:f2:06:ea:63:df:94:ea:e7:c0:e9:5b:c8:ef:0b:fb:f1:07:
6b:e5:12:30:f6:0b:0a:54:41:d4:af:c8:e6:fb:ee:f5:76:61:
b3:e9:a6:f0:b6:69:5b:7e:6e:ce:ea:0f:e7:ca:3e:f7:31:a9:
1f:20:b4:47:73:87:77:85:a8:89:c6:26:23:c0:44:ca:8c:04:
8c:08:5c:2a:c9:70:ff:34:af:c1:45:98:47:1b:e6:4c:64:fa:
c0:12:ba:04:3b:92:ed:99:75:63:76:8f:fa:f5:57:0e:92:d2:
e9:71:54:42:fc:f4:8e:88:28:bf:24:bf:d2:f5:18:b9:0c:1d:
ed:ae:05:ba:be:98:6d:a3:c3:f1:3a:e6:c4:b0:ae:69:6b:0b:
65:8b:21:f5:44:d8:37:11:0c:b0:09:b6:8a:0b:0d:09:05:2c:
c8:b1:71:ee:1f:e7:d7:99:44:85:fc:c5:b9:36:3d:5b:a9:55:
20:e1:f6:8a:af:7e:89:b0:b3:6f:68:e5:5a:df:4a:5e:cd:57:
cd:7e:b5:d9:84:0f:55:6e:e7:d4:5e:2e:82:b1:5d:09:48:75:
82:45:36:32:a8:85:65:43:50:e5:ec:be:76:8b:7e:d2:5d:0b:
37:19:07:cc:81:c2:2c:6e:25:e5:b7:a4:f7:ed:cd:c2:7b:c0:
53:fe:37:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:36 2025 by rpki-client