Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d915a031-d8e3-321f-923e-a1a4ed5b5bc1.roa
File: d915a031-d8e3-321f-923e-a1a4ed5b5bc1.roa (raw, json)
Hash identifier: zTOb3ORou3bMw+AHadH80OPbwlPmFLYuDmWUyfzZ+7o=
Subject key identifier: 0F:34:62:B2:5C:F7:F9:AB:C3:1B:BE:D1:59:C5:E8:86:2B:FC:C0:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1F84C6689C1909CA031EBE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d915a031-d8e3-321f-923e-a1a4ed5b5bc1.roa
Signing time: Fri 03 Jun 2022 20:03:08 +0000
ROA not before: Fri 03 Jun 2022 20:03:08 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1f:84:c6:68:9c:19:09:ca:03:1e:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 3 20:03:08 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=a97a697a-bfb3-4883-959a-484ce1762dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:a8:c5:78:fa:f0:a1:f7:17:3c:53:90:60:
ab:75:71:42:c8:41:d8:64:83:af:24:2e:5e:9a:e2:
be:e4:60:ad:f3:13:28:b9:29:a7:b6:00:8e:a2:d1:
35:c8:ef:a0:6d:9c:87:c0:da:21:16:71:ac:62:7e:
c2:c5:8b:d8:1b:6c:df:33:29:67:c2:80:4a:8a:b0:
5b:7c:1c:0e:9f:41:4f:b3:31:e3:73:83:5e:6b:1a:
61:29:ad:6f:b1:ed:5f:57:18:81:69:9b:4e:90:e4:
fb:6e:c2:ed:66:9f:b8:2a:bf:3e:a6:a8:c8:26:90:
d8:db:6e:1f:e9:08:83:4d:46:3d:64:14:24:0d:a0:
39:0b:68:69:79:df:e3:a9:61:19:cd:d5:cb:0a:0d:
98:81:9b:60:45:c9:53:5e:b2:6e:f9:86:4e:3d:4e:
79:52:31:2b:85:e7:e1:77:7d:67:de:87:74:3f:87:
65:bd:c3:c3:2b:8a:47:ff:c7:78:df:8c:87:18:b2:
ce:46:5c:5a:a4:74:01:ed:b8:75:a1:d0:91:b3:ab:
68:61:bf:40:49:8d:d3:f8:a3:cd:18:d7:5c:d7:91:
b6:79:46:af:88:d4:0c:fe:77:da:63:cc:1b:cc:b2:
3b:ae:27:95:24:5e:bd:1c:6b:e6:27:38:39:58:e4:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:62:B2:5C:F7:F9:AB:C3:1B:BE:D1:59:C5:E8:86:2B:FC:C0:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d915a031-d8e3-321f-923e-a1a4ed5b5bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:96:bf:c0:66:ed:63:70:cd:4d:b4:a0:32:db:69:59:a5:1b:
12:29:4a:63:a3:40:f5:c6:13:fa:0e:96:8b:2e:7d:19:d9:64:
41:64:c8:89:01:6f:8b:08:17:76:18:81:aa:36:03:ed:33:d3:
26:37:50:8d:80:8e:87:f3:f9:45:85:f7:60:fe:ba:3b:73:07:
fb:a9:cc:f0:5e:03:d4:9f:06:4c:77:b4:45:cd:e7:87:60:c9:
e7:37:67:bd:e1:e1:a0:36:39:8f:c3:d7:5b:26:c4:67:57:ec:
39:7d:b3:12:33:85:03:05:c9:49:13:60:09:11:0d:f1:cb:7c:
61:bd:02:bc:0c:55:ca:04:13:09:8e:93:36:2f:31:4b:c4:65:
cb:88:30:ac:57:29:6c:64:f1:9c:be:5c:4f:ca:e6:e6:41:e7:
35:98:9a:ce:38:ab:fc:be:b3:b0:a9:b2:93:27:01:0f:46:3f:
33:f7:3b:29:f7:dc:d0:0a:38:1d:4f:39:bc:82:72:75:7a:cc:
b3:af:4c:39:cb:46:c7:36:17:74:4b:6e:5d:3e:76:81:24:34:
b3:9e:54:bd:ed:c5:a9:10:45:2a:ac:09:d9:28:fc:7a:2f:29:
88:24:fd:59:c5:bb:31:e9:8b:70:00:5a:70:a7:ba:df:96:a1:
85:01:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:29 2025 by rpki-client