Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dde0e352-0296-30f1-a307-fc03d8964a1e.roa
File: dde0e352-0296-30f1-a307-fc03d8964a1e.roa (raw, json)
Hash identifier: HcDLpsh2cIHLFkStuUVuPgTZx/GW5sJ9DhRrhVFe2ic=
Subject key identifier: C4:4C:3D:21:65:64:49:E2:37:E9:68:D3:8E:91:3E:C0:F4:05:1F:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584044095137DE8CF185B9F66000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dde0e352-0296-30f1-a307-fc03d8964a1e.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 72.44.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:09:51:37:de:8c:f1:85:b9:f6:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=91957ca5-ab43-4cf7-a02e-4eac5d00a50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:61:de:ca:06:e9:82:aa:83:e9:4a:2d:be:
c4:31:72:e7:b4:59:d3:05:63:ca:eb:3a:94:12:40:
ae:e2:49:6d:81:12:05:b7:84:79:fb:5d:63:f2:17:
fc:d5:43:fa:b5:1d:6d:aa:97:b3:4e:0d:b1:60:f2:
27:84:80:07:f9:11:fa:ae:f9:e1:fd:88:1a:af:dd:
dd:57:cf:29:90:8d:f4:56:06:d5:bf:6c:98:d3:8e:
4b:4a:d7:56:c5:c4:8e:cd:47:96:4b:a6:84:d9:86:
66:67:c8:7c:e0:f1:0e:68:df:c2:08:39:79:93:ce:
86:64:97:a1:c7:24:b1:a2:25:e2:ba:d2:bb:ab:38:
4f:6b:46:57:9c:33:86:ff:d8:84:1a:cc:07:8e:85:
36:53:31:3e:69:48:b2:0f:03:f9:8c:1f:8c:2a:85:
c4:31:41:ce:d2:02:81:17:ac:81:40:ec:cd:42:65:
14:41:fe:5d:7b:51:95:be:ec:20:94:44:ec:5a:7b:
f8:d7:75:86:36:eb:09:62:45:a1:3a:ff:5c:c1:67:
38:5f:b3:e8:7f:6c:62:eb:7e:14:54:87:3f:53:ab:
e7:a9:ae:12:b0:b9:79:97:08:b9:af:cc:51:47:2b:
03:2b:81:e8:e7:98:0d:71:26:6a:c7:c9:90:5c:af:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4C:3D:21:65:64:49:E2:37:E9:68:D3:8E:91:3E:C0:F4:05:1F:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dde0e352-0296-30f1-a307-fc03d8964a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.44.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:f5:94:48:85:80:04:ec:3e:4b:da:46:70:06:17:86:05:e2:
d1:df:9a:fa:ac:11:5f:ae:67:f7:62:3b:0a:bc:59:b0:83:9a:
67:8a:7f:d8:80:31:38:ba:1a:27:08:71:38:36:23:28:5b:4e:
95:91:ba:f0:e0:ee:41:e0:62:7d:da:a3:39:69:66:d8:93:62:
72:6a:10:9c:58:d3:97:95:36:95:4b:54:74:07:a2:5d:a0:9b:
34:e9:33:d8:31:8e:32:1a:73:08:7e:8f:e8:02:40:d2:11:dc:
79:c6:8d:2a:46:df:4b:24:d8:42:33:d0:97:7c:f9:d5:d7:28:
10:bb:41:57:97:9a:55:7a:bc:57:95:05:3d:f0:ff:7a:f9:f5:
4f:0b:c2:e7:79:13:5c:17:cc:0c:15:6b:8f:c6:81:f6:3b:8b:
87:db:bc:1f:29:58:cd:1c:78:5d:e8:54:8a:99:f9:9a:0f:38:
40:ac:bc:75:89:d3:63:6c:a9:c2:e0:cf:76:15:6b:59:57:6f:
ce:1b:bd:c6:1f:95:0c:71:2c:2e:f3:87:e3:60:f8:b7:d5:8a:
47:9b:0d:08:04:d3:bb:0d:1b:12:08:eb:51:23:18:a4:79:8b:
ad:2b:fb:75:59:5f:2f:eb:08:f6:ba:95:6b:80:75:32:cf:9f:
73:14:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:34 2025 by rpki-client