Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2a0a3ac-b53b-3454-9280-c8e1770a04be.roa
File: b2a0a3ac-b53b-3454-9280-c8e1770a04be.roa (raw, json)
Hash identifier: YjbnX94bVx6EsZRYLSmAXkqonr+HJx2vEdKz3X/Sah4=
Subject key identifier: 9F:0B:2D:FE:82:A5:63:C7:2C:91:C1:66:FA:1A:CD:DB:CB:C8:35:7C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404427133B33EC45AAD5DCD900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2a0a3ac-b53b-3454-9280-c8e1770a04be.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:27:13:3b:33:ec:45:aa:d5:dc:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=e8761e70-bb84-4e88-a6a7-944bc0a8edae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:75:65:56:7b:1a:89:f3:e6:cc:c0:39:27:99:
d7:f8:c5:10:85:cc:28:c6:06:f6:76:35:e0:01:3d:
5d:c1:d4:9a:1e:69:50:f0:b9:2e:46:19:aa:22:57:
93:31:82:34:cc:7b:2f:90:1d:bc:73:06:7a:a9:d0:
a7:0d:aa:9c:0d:51:10:9f:52:82:46:ac:e3:78:43:
79:16:1a:47:a7:02:ee:d1:b5:84:9d:27:81:85:ea:
89:8d:77:48:f5:92:b1:92:55:fe:81:f8:61:5d:c4:
01:79:9d:07:f2:de:8a:19:7c:e9:54:71:76:b4:bd:
99:e9:2a:d3:d4:30:b0:b2:6e:ba:51:c0:c9:27:b0:
16:ac:6d:5d:53:a3:ed:3f:c5:a0:36:8a:bc:2e:df:
30:99:9d:aa:b5:79:1b:4a:b8:5a:01:1b:d7:f9:f1:
df:1a:d2:50:66:8a:47:a9:19:2f:4e:d0:67:5f:03:
a7:5f:0d:0a:8b:a1:81:18:e0:1d:6b:71:3a:0f:e6:
a7:01:aa:2e:d1:0b:34:26:0a:14:9b:81:e7:c3:4f:
49:31:31:60:84:4d:00:bb:d2:55:49:9e:93:e0:00:
7a:c4:4a:62:83:3b:74:e0:3b:c4:6f:f2:e8:f3:59:
c7:14:70:5b:57:d9:a4:13:5f:01:c4:e1:5c:93:33:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:2D:FE:82:A5:63:C7:2C:91:C1:66:FA:1A:CD:DB:CB:C8:35:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2a0a3ac-b53b-3454-9280-c8e1770a04be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b7:5d:9b:2b:9d:b0:5c:e5:30:a0:a0:50:90:21:e2:6b:64:
f8:91:c7:2f:d8:d3:61:84:c5:e6:45:88:14:02:ef:76:2f:73:
6e:ad:0f:ca:3e:3c:b4:95:1c:dc:7d:f6:a3:48:68:87:99:da:
45:31:e2:68:77:e2:3f:0b:5b:ca:c6:80:b2:fd:27:ef:be:f1:
d4:63:01:b6:87:67:c0:06:63:62:3a:1d:a8:b3:b0:c2:8b:13:
2a:8f:77:9a:7b:20:cb:17:1f:2d:07:c2:88:9d:bf:5b:58:2f:
4c:42:a2:46:ac:dd:72:e9:df:98:a1:ba:a0:3f:93:0b:e3:0f:
85:80:81:84:32:d4:c8:cc:44:a4:05:5d:10:4b:48:9d:7c:55:
e5:e8:1d:54:00:19:b2:62:85:d0:9e:59:d6:91:c0:34:65:94:
79:1e:11:14:58:40:d9:74:a6:e3:af:40:49:9b:92:66:ac:a4:
b5:98:17:fd:54:7d:7b:ee:b0:42:bc:2e:59:ba:56:ee:29:24:
51:59:e5:f2:c0:5d:73:11:a6:da:e9:93:8d:14:b0:33:0e:93:
0e:71:14:a3:f2:61:e3:27:d9:65:6c:dd:28:82:1c:e7:2b:95:
d2:99:af:dd:69:d4:c7:8c:7a:32:a3:4f:ee:90:53:49:3d:34:
a2:33:57:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:54 2025 by rpki-client