Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af873a31-f6d6-30f3-a65e-2686609a9fa0.roa
File: af873a31-f6d6-30f3-a65e-2686609a9fa0.roa (raw, json)
Hash identifier: DTGYV4/MbFYWf1PS93J+WwD+GoQQIdzCzu2tqNGGMeo=
Subject key identifier: 4F:B9:2A:55:A2:09:E2:38:E9:7C:9E:CF:91:BC:4A:90:49:3E:49:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F59717BDA25F9DE26AB8FD700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af873a31-f6d6-30f3-a65e-2686609a9fa0.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 72.44.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:71:7b:da:25:f9:de:26:ab:8f:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=2fb4b21f-048d-4724-9f44-1da381893c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:24:5c:bf:ed:07:e6:33:9e:a4:7d:be:b4:
c0:41:84:f0:6f:0b:76:0e:71:79:be:39:aa:18:b1:
91:e0:bb:f2:cb:bf:c9:88:4f:8f:fc:33:91:11:c7:
4d:44:16:16:d1:15:34:93:13:07:5b:ff:48:de:9b:
3b:95:1c:1d:d8:7d:3c:41:87:35:f1:44:56:ef:47:
3c:cc:30:9c:91:eb:d5:e3:1d:f9:3e:1f:14:93:f3:
b8:ab:ed:ea:db:fa:f1:27:a4:e7:e7:84:cc:66:46:
5a:60:08:4b:c2:ec:e2:98:49:cc:f4:67:d0:fd:fb:
a1:4c:12:ef:9e:78:9e:bf:95:95:2b:27:d2:ad:31:
65:9f:75:86:56:3a:bb:f7:36:07:83:2b:e0:61:7f:
86:87:e2:61:a0:c8:af:13:2a:10:c8:d8:48:38:b1:
d6:46:60:a3:dd:a4:ed:ba:11:62:37:25:4a:a7:15:
e8:f9:56:bd:c1:94:3f:34:5e:b8:ea:91:fd:39:35:
c9:1b:44:5c:db:4a:cb:18:af:26:07:08:5e:5a:2f:
d5:ba:02:cf:bc:bf:63:35:1a:25:d8:e1:e0:00:2f:
e4:db:30:78:4d:fb:90:7a:36:b8:a3:5e:ee:13:e1:
5d:b3:fe:20:01:58:5a:85:bd:de:47:5f:d7:29:a9:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B9:2A:55:A2:09:E2:38:E9:7C:9E:CF:91:BC:4A:90:49:3E:49:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af873a31-f6d6-30f3-a65e-2686609a9fa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.44.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:aa:65:ee:4a:53:2f:cf:ad:d9:6f:84:ba:cb:e8:16:71:cc:
6b:05:69:ad:9c:27:d5:e3:96:75:b8:07:91:68:e8:b1:b6:6a:
20:ae:86:94:a0:78:d7:40:fd:c1:11:33:e9:50:a3:27:5f:b7:
c6:6d:92:34:d3:f5:0a:61:86:35:88:2c:a8:a1:41:ce:78:da:
11:a5:7c:62:27:c8:00:e4:7f:ea:7d:1f:b2:74:f1:58:8d:b0:
27:ce:0c:86:a7:35:b3:2d:f5:8a:81:84:a9:fd:08:99:dd:d5:
8c:c4:d2:b8:a0:67:11:4b:e1:1c:53:9c:36:1b:4f:e3:e9:92:
e0:63:5a:37:1d:e1:d1:6b:32:82:45:2a:d6:15:61:f9:bb:89:
85:15:1e:5b:74:4f:f3:e1:c1:2d:64:0c:6a:6d:bd:e8:3e:e9:
66:b5:96:37:08:8e:4a:e5:0a:05:ae:d7:8d:b9:12:e4:46:d7:
b1:00:cd:87:4e:ea:da:87:a2:0c:5e:61:e1:ff:85:3c:9b:35:
c8:b6:e9:2b:d7:f7:fd:38:97:6e:e9:2d:18:4e:5c:0b:b3:87:
bd:c6:04:5b:a0:6c:bd:7f:20:f6:d2:da:0c:bf:d7:ab:a2:92:
2b:0b:95:ff:5e:ec:76:56:67:9c:92:9f:58:2a:22:99:3a:ad:
42:68:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:01:01 2025 by rpki-client