Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8b3f479-56e7-3f3b-91b6-f40709338926.roa
File: b8b3f479-56e7-3f3b-91b6-f40709338926.roa (raw, json)
Hash identifier: AU6xILUqtVusIHD9LfsnlRa9XeGaGA4f2SHenl327+M=
Subject key identifier: 28:90:44:9F:1F:E9:C1:2E:21:2C:6A:CF:22:20:EE:0A:14:95:5C:BA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401FB6C43F257A4D6BC804C300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8b3f479-56e7-3f3b-91b6-f40709338926.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 192.189.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:b6:c4:3f:25:7a:4d:6b:c8:04:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=7c79eacf-9d9a-472a-bb96-2f2f5506a600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:75:6e:a9:03:dc:b0:cd:df:01:8d:99:22:
c8:b1:51:3f:e1:bb:a7:92:d4:2e:29:37:84:fd:e6:
66:9b:e9:24:4d:24:14:6c:e7:e6:26:09:87:a3:5a:
51:73:e1:5e:30:be:b3:89:50:20:5c:48:81:05:1a:
1b:1f:d8:5f:22:fd:d7:7d:0f:ae:54:8d:c8:fb:af:
21:20:ea:aa:65:07:bd:29:24:32:2a:23:3c:90:5f:
57:13:48:fb:dd:e0:f8:8d:bf:7d:58:4c:f9:b3:4a:
a7:83:bb:3d:b7:08:d6:82:a0:1c:7c:76:46:7d:ed:
2d:5e:da:9c:8a:0a:ea:ff:e1:f6:26:81:51:2b:d8:
47:d5:0b:b4:be:f3:49:03:c5:83:66:f1:57:b5:7c:
f6:4e:4a:de:52:3a:13:75:e1:6c:b4:f6:d9:7b:0a:
6e:ef:d7:dc:9b:8d:ae:e6:32:0b:37:51:7f:99:26:
f4:72:20:1b:34:69:43:9c:9f:ca:ff:c0:01:fc:e1:
f2:09:8e:4a:b5:f8:17:18:10:24:da:88:da:19:82:
ce:4d:a3:86:68:dc:ef:be:91:87:19:48:12:8f:91:
e1:a0:f5:11:2b:4c:fa:89:35:c4:67:71:3f:2e:ca:
a9:2a:35:0e:ab:a3:13:ab:63:45:19:a5:1c:48:ca:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:90:44:9F:1F:E9:C1:2E:21:2C:6A:CF:22:20:EE:0A:14:95:5C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8b3f479-56e7-3f3b-91b6-f40709338926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:b3:56:9c:f8:c1:e3:51:8c:26:b2:ee:2f:5e:f2:87:a4:cb:
c2:b9:c6:22:00:f4:83:3c:5e:e7:fe:42:d5:63:87:65:0c:38:
bd:c1:5c:67:d0:72:bf:ef:54:c5:d2:47:90:d1:db:9e:59:b3:
e8:1f:76:cf:07:e9:11:b1:62:1b:4b:25:0a:40:b0:2b:50:1a:
01:13:54:56:90:cc:8e:2b:17:f6:2d:15:46:02:d1:87:0f:b4:
e0:52:79:da:7d:72:60:bb:dd:ee:1f:f8:6a:11:08:4c:cb:d1:
8e:bc:60:5e:1d:f0:e3:bb:50:29:01:9e:6e:b0:59:42:ba:fd:
d2:1b:6b:75:50:2b:0e:de:92:6a:fb:b7:80:71:e6:11:e6:02:
55:e6:13:bb:1f:4e:40:b0:88:73:b4:57:06:c5:0f:fe:30:af:
4d:16:49:cb:88:7c:fe:50:7c:b2:49:de:61:d3:28:dc:c9:8e:
a7:89:f1:5d:9f:f4:07:ff:7e:59:c8:21:eb:1f:c9:14:05:a6:
0e:d4:c1:25:55:e2:67:6c:82:d6:13:3a:f4:7b:fa:af:cb:41:
f2:a7:a5:ce:1b:08:b1:52:35:03:5a:3c:04:15:26:f8:7a:c4:
51:fa:d5:71:aa:30:1c:df:af:7b:29:a1:d0:3f:fa:16:59:e5:
71:f1:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:09 2025 by rpki-client