Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd958b42-af5a-35f4-884f-5cb0af5f578a.roa
File: fd958b42-af5a-35f4-884f-5cb0af5f578a.roa (raw, json)
Hash identifier: LwXoznYvpy7NQuEXPLprr1fmD4vt6Cbot/8Zd6f8LAU=
Subject key identifier: 18:0B:28:1D:30:A2:68:49:E7:91:E2:48:29:1B:15:5D:5C:D8:15:FF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584021A25AAA5369217059793690
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd958b42-af5a-35f4-884f-5cb0af5f578a.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Mon 09 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 192.26.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:21:a2:5a:aa:53:69:21:70:59:79:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Jan 9 05:00:00 2023 GMT
Subject: CN=e5b570fa-f013-46b1-907d-363d60883b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:98:75:d1:f6:e2:29:62:b3:2b:d2:3c:cc:
14:71:66:94:92:10:4f:02:c3:c1:08:3e:5a:ff:23:
8a:9d:ed:fa:8a:ce:22:9f:93:49:3d:e6:fe:ba:56:
18:d7:e2:56:03:ad:fc:f8:cc:d2:1b:25:6b:0f:2e:
6d:da:1c:03:07:22:94:df:e9:1d:b0:33:1f:40:ef:
f0:ac:6d:a6:61:e8:07:fe:e4:b1:97:20:c5:c4:b3:
f9:15:8f:2e:27:03:9c:f5:b2:31:ef:3c:30:b0:7a:
74:fc:4c:6c:85:e8:2f:d4:ba:09:e7:f9:e7:b4:5b:
92:a3:40:06:2d:fa:6c:3a:e7:98:70:8d:a2:f5:ea:
ab:c0:88:7a:98:bc:1d:49:80:16:56:93:80:b4:37:
0e:a9:48:25:49:be:ea:72:11:e5:ce:42:c5:7a:d4:
15:24:3c:eb:04:66:7b:86:0a:d0:15:d3:56:fe:e8:
e6:ef:ce:27:b8:31:68:fe:46:5c:8f:1d:8a:ab:24:
a8:e8:ac:20:0b:6d:f4:ab:d6:94:2f:a8:11:5c:7f:
17:16:5c:30:ae:c2:1a:5d:cb:15:f0:55:ee:be:d4:
04:8d:e1:50:0d:db:14:f4:3d:bd:19:50:28:08:da:
3d:cd:e2:ea:f4:ba:0e:1f:01:8c:2d:37:15:f5:16:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0B:28:1D:30:A2:68:49:E7:91:E2:48:29:1B:15:5D:5C:D8:15:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd958b42-af5a-35f4-884f-5cb0af5f578a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.26.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:24:66:5c:6d:46:cf:4a:f5:a5:ab:a0:14:b1:2b:ed:87:ba:
53:75:3f:10:c3:94:7d:0e:88:b9:f5:f4:a0:88:14:b8:9b:b3:
c3:e7:fd:12:f0:29:e2:0d:f2:dd:a1:b0:74:30:5c:94:e8:c1:
15:c8:54:e8:94:2c:e0:0f:0e:82:47:c5:19:92:ac:9a:6a:c1:
23:3e:0a:f4:89:a7:f6:9f:49:15:50:1f:db:fe:d6:f4:c8:0f:
ef:5a:8f:71:9e:ef:17:6e:7e:e4:11:73:a9:80:0b:7a:b8:7c:
4e:74:7a:d7:d3:bf:c9:22:73:77:65:06:08:46:31:e4:1a:8e:
be:5e:b2:09:2d:f2:7f:f2:cb:11:95:81:b4:15:19:a7:44:2f:
9c:cc:c0:8c:af:d6:8a:02:4b:b3:ab:84:44:2a:f7:bc:70:53:
a3:2d:f5:4a:40:c7:22:cf:e1:ab:37:af:b5:9d:e5:f8:f5:b5:
8d:cd:e6:c8:72:8e:20:14:9b:3d:2f:91:6f:2a:09:bd:65:e4:
3e:9c:04:27:62:06:e2:34:d5:50:dd:6f:25:38:96:7a:88:52:
b6:a0:f8:de:7b:bd:5a:5f:42:5c:d4:e1:12:89:ad:50:c8:9a:
50:cf:4c:b3:e8:5f:e6:40:01:21:f2:a2:e3:fa:94:b5:9d:c9:
44:28:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:20 2025 by rpki-client