Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc24aee5-a885-39ad-bfd7-08a7d2d40d97.roa
File: cc24aee5-a885-39ad-bfd7-08a7d2d40d97.roa (raw, json)
Hash identifier: yl1UMqzDkd7T9R/MsEzFQuTpraeQ9IroFumQCgYIT84=
Subject key identifier: C4:C3:37:E7:99:71:17:26:1E:E2:DF:9F:CB:D7:6D:4B:13:2D:AE:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409B03F36DE44F488A57536F60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc24aee5-a885-39ad-bfd7-08a7d2d40d97.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 132.223.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9b:03:f3:6d:e4:4f:48:8a:57:53:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=5ff344b5-53a8-4e20-83d6-73d7d15b6e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:cb:1e:f1:9a:fd:dc:ad:41:67:7d:4e:de:
22:d3:cf:6c:48:94:d8:b8:0a:9b:a0:3b:d0:3a:02:
85:9e:80:86:b1:a4:43:90:eb:4d:18:95:1c:97:57:
7f:3a:f6:20:df:50:6a:41:ad:cb:d9:bf:ec:88:fe:
dd:dc:26:dd:57:a3:24:5a:63:72:ce:f0:a9:da:b8:
2a:ef:4c:50:e2:9a:b8:3a:f2:9a:d2:be:a9:42:19:
95:c9:07:37:63:4e:50:e0:cd:a8:d5:54:56:95:0a:
c0:54:63:58:19:5e:13:c2:63:78:fc:6e:88:71:a0:
58:38:d7:3a:fd:60:67:a4:20:7b:88:a0:30:45:e3:
fe:2b:d2:c5:b6:e0:ed:1c:b2:1c:19:34:5b:e1:9c:
e8:d4:09:38:1b:53:bf:b0:7b:16:43:53:16:2e:81:
c3:ad:9d:5a:01:82:db:b5:88:a1:12:7c:4a:4a:69:
ef:b1:15:2d:93:06:51:6b:84:ed:02:84:d4:86:6f:
e7:cf:4c:6d:f9:90:58:83:e6:08:46:ba:94:98:53:
08:19:85:4d:b8:36:27:9a:6a:fb:b8:e0:b5:10:d4:
cf:7f:9e:91:50:42:00:68:c9:4c:15:fd:3b:56:52:
af:0a:68:4f:46:34:85:9a:18:c4:8b:d8:af:68:e2:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C3:37:E7:99:71:17:26:1E:E2:DF:9F:CB:D7:6D:4B:13:2D:AE:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cc24aee5-a885-39ad-bfd7-08a7d2d40d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
132.223.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:e0:d1:ff:cf:b5:c9:e3:84:b0:47:4b:92:8a:93:0a:85:67:
69:a1:1a:a4:48:76:f6:c2:00:4e:49:a2:fa:0d:2d:32:44:be:
22:d1:31:34:35:55:3c:5a:32:4a:18:2b:82:d4:ed:68:84:59:
81:12:f2:9c:c1:43:5c:8d:58:9c:29:50:0f:9e:9e:61:07:a2:
1a:b1:de:53:e9:06:6e:06:5c:db:ce:24:da:89:95:09:48:60:
65:f8:3d:4c:0c:54:61:f7:0e:63:cb:a1:36:99:5c:ca:8e:f3:
16:9a:b2:1f:e2:8a:be:a5:19:23:53:ec:b3:47:6a:e1:33:df:
4a:71:db:bb:92:69:b5:3a:72:9c:99:3b:db:15:37:2d:9b:2d:
f1:bd:1a:01:93:b4:3b:28:f4:b7:6a:4d:43:26:3d:f4:b0:f1:
75:ca:5d:5b:53:d7:88:2b:cd:5b:ec:75:3d:62:2f:f4:08:18:
67:b4:11:7f:5b:4e:98:0e:aa:ca:c7:e4:c9:06:c0:0f:95:ac:
c7:4c:9f:d1:12:ce:03:b2:5e:2b:65:bd:d0:9f:2d:0d:78:44:
59:5c:aa:c3:f7:9d:22:75:66:e4:13:31:ee:d6:b5:84:d2:e0:
f5:44:cd:5e:d1:12:69:cc:bf:10:c2:ca:69:51:be:51:d2:2f:
3e:cc:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:11 2025 by rpki-client