Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4447822-a9c7-322d-bca2-c463ce306521.roa
File: c4447822-a9c7-322d-bca2-c463ce306521.roa (raw, json)
Hash identifier: DrlWUtSpZ1uHNny9F+En7kek4Kg1K4Ui1wTkt5cEeq0=
Subject key identifier: 19:F3:87:4D:98:8F:E3:22:32:0E:26:7A:0A:E4:07:F4:F3:93:9D:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAA61DB8DA599A006663A9580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4447822-a9c7-322d-bca2-c463ce306521.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 184.32.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:aa:61:db:8d:a5:99:a0:06:66:3a:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=1f171d48-7640-49a2-9554-3892fe9df896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:2f:7f:66:d1:9f:cd:54:3d:21:cb:e0:c8:
62:73:aa:f8:c2:12:3b:c7:ce:cd:2c:6c:ec:0d:f0:
13:86:d3:75:17:f1:c2:58:ac:ec:cc:b9:25:6a:bd:
6f:b9:a9:fb:3f:7c:59:92:d4:e0:66:93:eb:14:7a:
70:2f:a4:a6:cb:f0:79:16:86:7b:14:16:4e:63:e1:
93:77:19:3e:29:ab:ce:67:e7:da:5d:b0:11:9e:31:
b9:f8:9c:bf:54:0d:a8:7c:0f:68:94:b3:53:aa:f9:
69:88:50:fd:0d:90:25:bf:cb:be:a1:c0:1f:fb:91:
49:9a:a1:0c:5e:3a:81:71:56:ac:09:69:95:62:a5:
04:8a:be:55:8e:9c:a0:a9:98:32:37:c0:e5:98:1b:
91:a0:fe:d4:9c:2d:e2:06:42:fb:f2:c9:53:6f:7d:
ab:29:91:0e:a5:5a:91:cb:dc:ef:29:71:05:ee:40:
2e:f7:21:6f:6a:16:e6:1e:72:28:7f:2e:af:9a:6c:
ad:cc:d5:ed:fc:14:11:e9:8d:35:ae:23:0d:f0:e6:
ee:e8:f1:6c:38:d2:a5:08:23:21:91:9c:79:9b:03:
99:52:8c:cb:53:2d:27:ec:71:56:ef:2d:9b:b9:ea:
49:2d:3a:d0:ab:cf:9d:c8:88:2b:ce:5c:78:be:02:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F3:87:4D:98:8F:E3:22:32:0E:26:7A:0A:E4:07:F4:F3:93:9D:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4447822-a9c7-322d-bca2-c463ce306521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
184.32.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:f4:62:a9:e9:2a:fe:e2:ba:1d:86:37:b0:38:82:94:95:a0:
fb:3f:eb:05:cf:ce:9a:3f:2f:d4:ee:bd:a6:56:24:1a:78:a4:
16:ec:4e:40:f9:a6:fa:65:46:da:cb:82:d5:f8:b0:59:e8:78:
e9:f9:9e:94:22:73:3e:bd:1f:06:01:7f:ec:e8:28:63:89:ee:
9d:93:60:04:a1:54:00:94:21:06:8a:92:ba:10:98:c7:a7:4b:
02:82:8d:1d:5a:26:47:d1:61:af:92:4b:4a:88:fa:37:fa:38:
95:f7:32:e7:c4:7b:13:d3:ee:c8:07:e2:31:8c:03:5b:86:cc:
50:94:3b:3d:0a:37:bb:1e:ae:ed:52:45:4d:6c:57:34:bb:6d:
f9:68:24:eb:0f:33:b8:78:2f:3d:40:63:bf:c7:fe:a4:e7:d7:
9c:66:f7:cc:17:1d:be:cb:b1:d5:e9:d6:a1:89:02:ce:f9:a3:
04:b2:2d:91:fb:4f:bd:a3:9d:24:31:b5:b7:ae:96:5c:a7:ef:
89:45:01:3b:d3:74:8f:af:3a:56:a9:49:55:3c:25:4b:b2:0f:
e7:9f:e8:32:86:d0:e5:2a:bc:ee:27:d4:e3:38:b3:6b:77:c8:
86:f1:b2:5c:ba:fd:86:72:86:fa:4c:ec:bc:57:5d:58:eb:9f:
20:c5:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:22 2025 by rpki-client