Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2daf492-be53-35c8-8079-350410e6991c.roa
File: c2daf492-be53-35c8-8079-350410e6991c.roa (raw, json)
Hash identifier: PseRPrUE27H2gi/4M9V6DSNV82nFBky+jJtZo1nvezU=
Subject key identifier: 43:F4:31:7A:03:30:E3:85:92:34:1C:32:AE:94:C6:32:21:4A:F9:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406A1A40572E08E67E6430CF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2daf492-be53-35c8-8079-350410e6991c.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 64.187.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:1a:40:57:2e:08:e6:7e:64:30:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=30774adb-4e3a-4777-9edc-a0768df7abc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a0:de:75:70:8d:e0:03:da:c1:3c:77:d1:50:
ac:fe:c5:42:65:4c:5e:a6:3d:60:6a:b0:23:70:19:
91:a9:c6:e9:97:e8:89:67:81:5a:b3:46:0f:e0:56:
04:db:5f:b4:9b:b9:8d:81:4c:f6:13:ae:c6:d1:3f:
c5:49:7b:68:dc:99:1c:e5:a1:ee:1d:93:eb:1f:3f:
60:a4:08:ab:5e:8d:50:15:63:f3:e5:ab:f9:33:eb:
20:f9:f2:0f:91:e0:cb:15:d1:b6:21:7e:ad:0b:52:
d9:0e:52:28:21:84:f3:3e:4a:30:42:c5:7e:b2:0c:
11:ef:b5:3c:58:2b:71:f6:25:36:7e:9a:a0:62:2c:
12:57:68:9d:ab:ac:19:3d:ac:6e:0c:8f:29:16:b9:
13:99:1e:3e:7f:8e:6a:d4:0a:4a:a5:97:ca:42:31:
bf:6c:2a:2a:bb:c9:42:7b:76:bb:76:77:4e:ec:37:
98:f4:81:bf:ac:b6:e0:e7:4d:c4:33:6b:26:3b:4c:
05:42:41:81:92:7b:44:99:8b:f2:c2:f0:7e:88:b8:
e8:5d:cc:08:17:b0:a6:8f:51:93:25:7a:b4:93:50:
d9:b4:33:de:ca:36:f7:e9:48:f4:ec:d0:2e:02:26:
b6:d2:48:8c:a9:bf:73:52:fc:6d:75:d6:c8:82:9c:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:31:7A:03:30:E3:85:92:34:1C:32:AE:94:C6:32:21:4A:F9:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c2daf492-be53-35c8-8079-350410e6991c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.187.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:fb:ce:fd:99:a2:2f:2c:27:d1:ee:a7:cf:4a:49:48:08:f7:
33:1c:29:83:c1:56:8d:5e:27:cc:2f:be:ca:97:73:c5:78:85:
21:a1:c4:db:8f:fa:7c:d3:78:a5:e6:16:26:be:52:da:36:3b:
75:5b:b0:5c:12:16:ae:48:6d:80:7b:e5:e4:87:62:a2:c2:4a:
3c:3b:b6:b6:bb:0b:97:f3:36:08:6a:e7:63:da:7d:5c:6c:58:
f6:77:7e:f4:0d:4b:7c:64:01:f2:7a:9a:a7:01:c4:56:a0:91:
3c:5b:9c:a2:36:63:21:49:d5:26:76:40:08:26:9d:25:d7:a3:
cd:29:0a:6b:cc:bb:20:43:9a:55:44:d8:86:b8:2a:0d:9a:c5:
40:90:38:20:31:55:d4:e2:b5:03:f2:e2:bb:67:5c:7c:33:58:
2e:f8:59:aa:49:8a:15:64:04:a7:10:bd:fa:fb:47:8a:d3:23:
10:29:3c:d1:c6:09:eb:9f:7c:92:5c:d3:c3:06:0c:c4:20:0a:
27:38:7b:0b:60:a4:ec:ee:19:f6:6c:75:3a:18:ed:35:4d:ce:
c3:df:15:1c:07:31:a8:30:47:55:b9:79:47:b1:70:1a:45:d4:
81:24:21:9e:94:a6:1b:63:73:c4:94:2e:fd:ed:6c:6c:59:1b:
38:2b:0d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:17 2025 by rpki-client