Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db0408a4-7152-3d1c-9535-f9f4707b3a0b.roa
File: db0408a4-7152-3d1c-9535-f9f4707b3a0b.roa (raw, json)
Hash identifier: AOj0FvEY/mz41hsYq8auNBx2XXKPen2/E8vhtjk16A0=
Subject key identifier: CA:08:26:BD:9D:4C:B3:4A:97:20:04:45:F2:17:99:9F:AB:BA:ED:CA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC2EB403B2CDAFDF3FFA55850
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db0408a4-7152-3d1c-9535-f9f4707b3a0b.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 701
IP address blocks: 204.126.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c2:eb:40:3b:2c:da:fd:f3:ff:a5:58:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=305270e5-1dc5-4cd9-9659-bfa188f5ae2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:56:c5:84:98:a6:5e:48:5b:dd:ee:7c:3b:f8:
eb:5f:ef:41:f7:6d:fb:dd:95:e0:3e:68:6a:cd:ba:
1c:c9:93:3a:52:51:98:15:d1:c7:f0:e0:a5:4f:29:
8f:6c:a6:87:a3:25:43:21:18:d4:a8:bf:a1:46:88:
d3:04:6e:c7:43:24:5e:f5:c6:ca:cd:02:b7:b8:65:
16:0c:f7:a1:55:82:ac:74:83:ed:c5:49:bc:42:d7:
e2:d0:fa:e1:db:14:65:25:97:fa:66:4c:c0:5b:d0:
6c:71:82:46:43:f2:2f:85:21:f1:71:33:f5:7c:b6:
cd:4f:59:06:4f:fc:0d:d1:2a:09:46:f6:94:6f:04:
9c:13:50:f2:80:8b:94:e4:ee:33:61:f6:46:35:95:
3d:d4:bd:86:e2:c2:5d:ad:1e:d7:e1:98:c0:62:c5:
1c:c4:0e:3a:eb:2b:da:b8:18:a6:f4:01:ce:3b:24:
f7:ba:50:3d:23:09:7d:27:4a:b0:76:30:3b:1a:4f:
8f:d1:4e:27:52:ca:04:85:bc:e5:24:7f:9e:69:ca:
3c:39:d0:56:7a:19:c4:ac:fc:ec:48:ce:5c:5c:09:
30:d3:8b:3a:35:5c:e2:a9:49:21:9c:c9:ba:cc:18:
dc:d0:ea:14:2d:b9:49:8a:fd:ba:e2:c9:2f:69:58:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:08:26:BD:9D:4C:B3:4A:97:20:04:45:F2:17:99:9F:AB:BA:ED:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db0408a4-7152-3d1c-9535-f9f4707b3a0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.126.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:a5:8b:81:05:2c:77:27:8a:9e:c4:33:ea:01:bf:81:2f:d8:
2f:df:ea:3e:f4:55:12:ed:ac:82:dd:cd:85:9d:82:24:aa:61:
7e:cc:4d:60:5e:5e:63:b7:10:16:4e:82:11:36:90:5a:09:6c:
27:5d:15:23:84:ba:04:34:10:7d:30:9e:7c:68:2a:40:09:dc:
6c:80:e9:9e:51:f7:c4:48:30:0b:78:ef:0b:5b:c1:3f:00:d4:
17:08:8b:bb:a2:2c:e0:41:a4:84:84:32:31:14:56:61:19:bc:
79:44:11:50:1e:71:3e:76:3e:7f:2b:b4:0e:83:1f:43:a1:69:
7e:8a:b5:9e:56:27:db:ae:5a:af:18:ea:1c:07:cc:d0:d3:d9:
ef:57:1d:dc:8a:43:45:d7:24:92:04:0b:fb:ef:bb:01:0a:11:
79:7b:eb:58:5f:89:18:b9:a5:06:c2:9a:b5:5a:82:31:9c:49:
e0:c3:92:9c:28:ee:f5:8c:9d:3b:b0:a1:54:2b:a5:db:cd:f1:
bc:b6:b6:8b:95:cd:58:de:f8:06:8a:ee:17:d7:71:d3:ab:44:
da:26:80:72:47:bc:d8:83:8c:0c:ac:f9:00:df:50:b4:cf:b4:
dd:c8:5e:c8:07:48:3b:71:19:dc:c2:b1:3a:63:f3:11:01:31:
f5:19:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:19:29 2025 by rpki-client