Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd04d22f-e596-3882-9a42-968ae1db2ea6.roa
File: bd04d22f-e596-3882-9a42-968ae1db2ea6.roa (raw, json)
Hash identifier: taMgV80UH/q4wNXp+Y6z1yk8NLX15aylM+5MTaxRK3Q=
Subject key identifier: FF:F1:D1:D7:18:76:8C:18:C0:48:DB:AF:F7:F0:BF:3F:D6:5A:56:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCF8A08ACFCCA3FB8CBEAA280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd04d22f-e596-3882-9a42-968ae1db2ea6.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 192.10.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:8a:08:ac:fc:ca:3f:b8:cb:ea:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=32c99950-45e5-4a9b-bc2e-7f59ae4e77cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:1d:dd:95:77:e7:69:08:2a:e7:03:90:b3:
f1:48:38:c4:70:16:22:f3:3f:db:8c:d9:60:56:4b:
74:7c:7f:81:db:c7:9d:99:87:6d:91:c1:29:a0:26:
93:8b:b0:8f:b5:b3:71:8c:ad:69:a4:8f:e8:5b:a4:
9c:50:8d:e2:98:5d:91:42:81:26:da:1c:72:bb:79:
6f:d9:64:65:89:9a:ff:1f:f2:93:c5:5a:03:d0:4a:
6c:5a:8e:0d:d8:ad:1f:82:5e:38:ec:d6:43:1d:a7:
0c:b3:f3:65:81:2e:5e:a9:0c:e0:cd:7d:c5:82:02:
49:6b:1f:a3:47:d0:8f:da:ee:df:f8:2f:83:23:1b:
a4:78:6b:54:96:1b:a2:52:91:16:57:66:cc:3b:41:
75:ff:18:9b:bb:17:53:7c:3c:7a:a9:01:81:0b:ea:
b6:c9:17:d2:28:b4:0a:d3:64:b4:75:d0:7d:c2:5a:
af:3f:e7:51:69:b0:84:e2:15:a6:54:d8:1b:f0:a6:
0b:13:31:2f:45:69:e2:40:09:79:46:bb:b8:d9:59:
02:95:96:fb:8e:d7:60:ab:1e:5e:06:45:51:fa:07:
a6:c9:7f:c1:36:c3:0d:92:c0:0a:cd:c5:21:f5:ae:
bd:55:5e:14:8e:7a:88:56:2f:0e:12:ec:5e:16:ae:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:D1:D7:18:76:8C:18:C0:48:DB:AF:F7:F0:BF:3F:D6:5A:56:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd04d22f-e596-3882-9a42-968ae1db2ea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.10.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:6c:e5:a9:db:cc:e2:13:9f:30:95:d2:9b:32:74:78:46:d8:
cf:ec:73:40:96:aa:e9:6b:59:95:98:44:fd:55:e7:a6:a0:a5:
d9:5f:40:bf:dc:51:f9:97:40:c9:c8:af:ef:28:8f:0f:e6:de:
86:e3:ec:68:1d:c7:a6:ef:35:32:97:b0:eb:b4:ab:44:f8:83:
da:86:93:1c:b2:d8:0e:11:3c:5f:64:43:d5:ea:70:bd:46:89:
a4:35:a0:af:09:38:db:5e:0b:1e:65:62:dc:9b:2f:f6:2a:62:
7e:07:b4:fb:52:ae:0e:ea:be:c5:f6:ec:a1:1d:8c:ba:6f:3c:
e2:74:0a:d3:87:37:e2:10:33:17:8f:cc:2a:42:79:f8:ea:7d:
2b:e1:e9:c0:b3:04:17:7f:d3:3d:d1:b0:a9:eb:74:c5:d0:0f:
36:6b:a3:53:ee:c9:60:e2:55:ef:cc:c1:3c:08:1d:3c:5b:e3:
5e:c4:0d:12:54:7a:fb:c6:ca:5c:c0:fe:7e:69:fe:1c:d1:e8:
76:43:8a:11:74:68:55:30:a7:2e:c5:9b:d7:ea:91:de:26:7b:
0d:fe:70:b4:5e:b9:e0:73:4c:4a:11:d5:d3:8f:52:61:d2:e8:
a4:7d:81:d1:4c:f9:ea:77:75:aa:38:04:12:6b:93:5e:c6:f4:
9e:6c:42:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:11:36 2025 by rpki-client