Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1ac2efb-dffa-34be-9165-2338f758c078.roa
File: b1ac2efb-dffa-34be-9165-2338f758c078.roa (raw, json)
Hash identifier: JFLS8rjS1c8KXBS7ZkFPoEDAk+94HyNEy4jXQ5R0Y2I=
Subject key identifier: 98:6A:D4:BF:90:D2:3B:3D:EA:5C:AD:E2:4C:21:0D:F4:A3:D5:8A:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE32C3312B3D582B6E836BC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1ac2efb-dffa-34be-9165-2338f758c078.roa
Signing time: Fri 12 Aug 2022 14:42:08 +0000
ROA not before: Fri 12 Aug 2022 14:42:08 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 192.189.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e3:2c:33:12:b3:d5:82:b6:e8:36:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 12 14:42:08 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=3fbff26f-1173-4478-8051-3c8550267a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:f7:6a:04:d5:ed:87:de:de:77:a9:56:8d:
bb:13:a3:99:8a:fd:1e:f6:b1:d4:a9:47:a2:12:fb:
80:7d:1a:36:96:82:cd:16:10:78:01:3e:c5:90:7f:
dd:ac:ff:93:ed:56:d9:db:84:f6:ed:a2:02:f0:48:
9d:8d:79:d9:96:f5:94:48:3e:fb:f3:0f:8e:f2:03:
4a:a0:4a:39:8f:b4:8d:87:ea:95:3c:db:31:a7:cd:
79:74:db:a7:e2:4e:35:ed:14:8b:a7:3d:e3:2a:5e:
ce:85:95:25:00:aa:a9:42:74:6d:50:14:e8:49:f3:
33:49:7c:fc:ae:dc:af:e3:cb:c2:66:9a:39:f1:29:
e8:65:76:ca:05:fb:6d:58:85:f5:88:de:14:78:d7:
d5:58:5b:7c:45:45:0a:89:a5:45:8b:64:07:99:7b:
bf:3c:6b:5a:38:c1:d2:e6:b2:0c:65:b3:c4:da:d5:
87:4a:19:4d:93:1d:b8:72:29:a0:88:01:25:f0:42:
82:e0:6d:90:50:5b:22:92:60:71:86:a9:bc:9c:49:
44:14:ce:e3:dd:47:98:0a:cd:f7:40:ad:51:46:7a:
67:83:7c:92:c7:8f:4d:ba:08:2c:88:0c:0f:08:2b:
77:e4:a1:4f:3d:33:72:53:bc:5c:4b:bc:5d:41:83:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:D4:BF:90:D2:3B:3D:EA:5C:AD:E2:4C:21:0D:F4:A3:D5:8A:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1ac2efb-dffa-34be-9165-2338f758c078.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:48:30:a9:00:97:57:a0:d8:6d:84:32:08:1d:60:4e:a4:04:
8e:0d:8a:11:92:06:35:7c:2c:09:b6:41:12:8b:c2:23:f0:dd:
4a:ca:e0:0c:93:72:df:2e:d9:fe:c3:f5:0b:80:49:79:84:3f:
50:91:36:70:48:45:3a:b2:b5:f3:0f:6c:07:5b:da:77:7a:18:
bb:99:63:fa:40:eb:82:fb:8d:31:85:87:f8:da:5e:17:91:ec:
eb:b0:3f:48:7b:16:96:a8:bc:e0:68:86:05:30:0c:c9:65:bf:
8a:61:c0:c9:09:f2:8c:3b:fd:ec:b6:06:c6:a4:c0:a3:70:5b:
bc:c7:89:1a:7e:43:8c:5a:f0:62:67:08:32:7c:57:ac:11:eb:
88:77:d2:c7:23:54:45:2b:b2:55:07:f4:4b:cd:9a:f0:e0:98:
54:1f:f7:61:dc:9d:2c:3a:1b:19:f4:a8:6d:bf:cb:4c:43:4d:
cd:5d:10:56:58:07:e8:f5:d9:57:cb:2d:b8:01:34:26:2e:84:
27:57:34:42:ac:bc:46:27:0b:5b:51:c9:9a:41:42:88:a1:8f:
c7:37:7c:5c:dd:45:f8:5f:21:95:f0:cf:dd:3e:7d:f4:85:ea:
ca:b8:86:9c:e1:60:83:13:06:22:e7:e3:99:d1:ed:a7:c2:14:
be:75:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:58 2025 by rpki-client