Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6fc5704-38c9-31c9-83d0-ab17a0a374c0.roa
File: c6fc5704-38c9-31c9-83d0-ab17a0a374c0.roa (raw, json)
Hash identifier: zOg4mKXRzWkaAN/c57flApbBMXjVpsW+U6ermXzEAiw=
Subject key identifier: 1F:0F:17:7E:AE:D8:CA:64:47:7E:BC:64:A4:92:BD:BB:F5:94:A5:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584073C9752301888BCCC7D68F10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6fc5704-38c9-31c9-83d0-ab17a0a374c0.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 132.223.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:c9:75:23:01:88:8b:cc:c7:d6:8f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=b831a44f-0591-48d0-aec7-2d5be25c815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:e0:b6:d8:4e:58:db:ea:24:db:68:af:37:
95:92:ae:7e:a2:85:b7:39:da:85:9e:b1:f1:6d:c2:
d5:b3:53:94:48:29:b3:66:c1:5c:9f:fd:cd:3f:ee:
88:00:21:38:f6:1d:6f:21:65:60:ad:d4:ec:54:83:
4d:fc:33:01:ec:7b:b7:ed:5d:5f:17:5d:82:12:73:
0d:0c:cd:c5:af:80:3f:9c:b2:ba:e0:54:7b:b6:18:
c6:9b:bd:98:4c:98:31:e0:d6:28:44:63:fa:04:df:
d7:b1:65:eb:6a:73:9d:78:68:96:2d:59:6e:b2:d2:
ea:7e:fe:e0:64:5a:22:01:25:1a:5e:ee:6a:72:63:
f1:b8:a3:06:8b:17:5d:01:99:11:be:92:0e:37:f3:
f8:27:b3:fa:67:0d:ca:fc:af:5e:3f:a8:c7:0f:ea:
d6:c7:14:f4:c8:1a:02:77:9c:ba:dc:d4:fd:eb:1e:
db:56:77:b0:54:19:80:a5:3e:d1:22:95:c8:31:2d:
14:c1:88:cc:d3:c0:cc:cd:7d:6f:90:42:20:7f:da:
c4:fd:2d:a5:44:0d:63:2f:fe:19:9f:31:f6:82:8d:
61:9c:51:69:55:e2:73:65:e8:74:05:9f:2b:bb:62:
b2:6e:ed:72:31:45:75:7e:a5:a4:a8:5b:68:e2:a7:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0F:17:7E:AE:D8:CA:64:47:7E:BC:64:A4:92:BD:BB:F5:94:A5:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6fc5704-38c9-31c9-83d0-ab17a0a374c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
132.223.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:50:f9:ef:d1:1d:7b:e7:4d:11:ea:3d:02:66:8b:75:ea:ba:
73:4f:3b:87:3a:a4:8f:2c:ad:a1:8d:dc:33:6a:07:06:b7:1b:
1e:ce:c6:60:27:38:d0:ca:82:c3:e4:84:5b:99:68:7a:8e:e5:
91:6c:15:90:2c:64:49:51:86:cd:bc:dd:be:bb:5c:78:dc:c0:
fa:aa:b9:ed:de:5e:10:24:66:08:ca:f3:b9:00:c7:28:a5:f6:
dc:59:a1:59:a6:84:04:57:79:3b:d9:43:3a:ad:52:d2:d6:3d:
e3:fb:b8:5e:e0:73:cb:99:3e:8a:15:74:92:f9:14:49:77:a1:
d1:84:79:6a:8b:0f:99:f3:c4:04:b7:d7:67:ca:2c:e6:ca:32:
16:af:d7:32:76:41:6d:f4:e1:7e:d1:b8:99:ee:64:5b:b7:62:
d5:aa:b4:75:1b:df:cc:f5:df:b5:91:92:88:50:bd:7f:86:0b:
53:69:57:e4:1f:2e:bf:be:ba:c5:fe:a4:70:a7:18:76:8f:7d:
38:6e:4a:1b:03:7a:23:5e:6f:01:30:ab:6b:fd:56:6b:19:7f:
f2:f5:f2:c4:22:cc:8e:d3:70:7a:fc:4b:8b:6a:13:a2:6e:94:
16:04:9e:c1:95:c1:60:7f:5f:c5:6b:f7:80:2f:e0:82:f6:08:
9d:e0:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:56 2025 by rpki-client