Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b31b923d-f9a6-3bf9-852f-1bc48f851cd5.roa
File: b31b923d-f9a6-3bf9-852f-1bc48f851cd5.roa (raw, json)
Hash identifier: aUGSVt85blmEoJyyQ8xQ+7IEnALlzam1t4h1LJZMhLY=
Subject key identifier: 3A:E2:DF:A5:20:24:75:08:24:B6:C7:44:6A:F8:35:2B:3F:D4:1B:1A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840A241B0F192CB64CFC57C64C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b31b923d-f9a6-3bf9-852f-1bc48f851cd5.roa
Signing time: Thu 19 Jan 2023 12:00:00 +0000
ROA not before: Thu 19 Jan 2023 12:00:00 +0000
ROA not after: Fri 24 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 134.31.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a2:41:b0:f1:92:cb:64:cf:c5:7c:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 19 12:00:00 2023 GMT
Not After : Feb 24 05:00:00 2023 GMT
Subject: CN=6cada8b4-fded-4f5e-b55e-edced98d1c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3c:68:04:07:25:0a:31:07:cc:53:ad:8a:a6:
7c:f1:b3:2e:37:86:ac:f0:08:56:48:61:b1:c6:b4:
c1:8a:52:86:a8:d3:cf:36:19:4f:e6:a9:f2:b4:92:
bf:d5:e3:2f:35:99:f1:e5:89:f0:72:1b:f3:2c:6b:
d8:34:b7:ed:4f:cd:67:93:bf:d3:23:25:a6:d0:a8:
e5:e8:cc:6b:45:01:d3:f4:1f:21:30:4f:26:d9:fa:
07:a8:11:00:3d:e7:df:22:20:22:84:eb:8f:91:97:
3c:10:6d:7a:c5:c7:2d:0e:1a:60:a3:f6:2e:a2:98:
68:d2:ec:f1:46:4d:45:98:e2:bd:c8:2a:65:fa:3d:
ac:e9:28:45:ff:58:77:fe:7e:a3:9f:76:17:99:c6:
21:80:28:ff:97:b4:9e:69:33:21:7b:1d:10:15:9b:
f7:5b:c1:94:69:f7:a6:b1:26:57:fb:d1:02:0a:d9:
f9:06:6c:28:01:6c:c9:a7:40:0b:07:c3:76:c2:7d:
cc:55:47:a3:fa:11:6d:46:7f:68:69:f7:86:23:10:
5b:17:13:ee:fd:4d:75:ea:f3:42:32:5b:87:24:06:
45:0b:b1:ba:43:14:8e:76:e7:c2:20:21:b7:f5:6c:
86:19:da:82:61:f8:95:9e:06:61:e4:54:61:35:14:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E2:DF:A5:20:24:75:08:24:B6:C7:44:6A:F8:35:2B:3F:D4:1B:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b31b923d-f9a6-3bf9-852f-1bc48f851cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
134.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:ab:4f:76:a6:6f:da:87:ac:c2:be:0f:5c:1c:77:85:fd:97:
f8:19:7f:f2:c8:08:81:2e:ea:98:2c:25:c2:10:cb:db:03:51:
a9:c6:6c:89:4a:15:71:3b:f3:75:a9:d7:2a:e1:a5:ce:4e:09:
ba:1d:7d:b5:dc:98:db:05:62:b9:58:d7:8a:c7:cb:6f:4f:d8:
85:2f:8f:e3:db:36:45:42:d9:91:0c:55:d0:ac:aa:a7:8e:4f:
f3:41:bd:38:44:2e:47:ff:65:b7:88:1d:e7:9e:a6:48:f2:45:
05:62:8c:df:a9:8a:2d:fc:81:98:bf:a4:9f:2d:7b:14:2f:6c:
7c:5b:25:5e:23:be:fc:d5:f4:c7:5e:63:12:b6:a7:58:24:61:
0b:3d:56:eb:b5:b4:a2:87:af:31:80:8b:2d:19:f6:7f:08:f1:
b5:ae:0f:99:70:20:83:23:d0:0f:21:df:17:69:d9:64:2c:2c:
1a:4e:2f:06:d4:c5:3f:1e:3c:3f:51:6f:9e:4a:65:58:7d:9b:
df:a4:09:93:ac:5c:5c:27:74:47:86:a7:ad:55:89:51:97:3f:
22:3b:8e:2b:b2:c3:86:cf:f6:5c:09:bc:f3:85:c9:7a:95:95:
fb:16:24:53:73:66:5b:78:9a:bb:a3:7e:97:9a:2c:e7:6a:bc:
1b:09:fd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:35 2025 by rpki-client