Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02d1c953-7277-34ff-a797-cc6dee00fbfc.roa
File: 02d1c953-7277-34ff-a797-cc6dee00fbfc.roa (raw, json)
Hash identifier: Ws2YSwFBUqWED1EzmEDAu238fwr6voKK/3L3WuCJco8=
Subject key identifier: 8E:1E:F8:8E:3D:B2:37:52:D1:E0:8D:A1:1C:D7:52:14:3F:D5:1D:53
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF628972685BF6F2FF5FD9700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02d1c953-7277-34ff-a797-cc6dee00fbfc.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 75.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:28:97:26:85:bf:6f:2f:f5:fd:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=ea5c780b-2798-49aa-804e-4e85063210f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:ba:47:13:42:b3:dc:ed:79:9c:3f:9a:53:
99:fd:25:21:fa:fc:0d:07:3d:49:f6:88:1b:8a:8d:
68:48:a8:5d:ea:02:ec:9c:10:7b:e8:b8:52:3b:ff:
85:2e:e4:17:b1:65:03:d7:1f:84:6b:ea:e7:2c:bf:
c8:6c:69:90:bf:3d:ef:16:3c:6f:3f:05:c0:1d:12:
0c:d5:38:b8:9e:35:93:5b:c7:23:ba:7d:33:af:61:
23:93:c7:62:ab:1d:9e:66:b7:9a:be:9b:4e:16:7c:
d4:14:72:20:3f:cb:b2:32:84:15:7c:97:3e:66:fe:
46:8f:86:5f:ff:02:c5:34:58:d8:fc:95:b8:9a:e9:
c3:20:f8:1e:97:a4:f5:6c:5a:ae:38:40:c2:7f:17:
87:12:d3:24:db:a0:4e:1a:05:20:d9:7e:89:a8:16:
df:0a:b2:ae:60:83:42:f7:1e:c8:47:32:d2:98:37:
b0:2e:c3:5f:97:98:cf:75:93:e7:65:f0:3b:b4:ac:
6c:f0:27:fc:55:e7:70:ce:48:78:ac:a6:9c:14:96:
2b:00:7a:db:1c:ba:19:21:96:06:4d:71:8d:10:fe:
55:ba:02:ce:be:3e:82:67:37:22:d2:5a:fa:3e:ef:
dc:3d:dd:f3:ba:f7:3d:d6:61:c4:9c:69:31:ca:98:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:F8:8E:3D:B2:37:52:D1:E0:8D:A1:1C:D7:52:14:3F:D5:1D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02d1c953-7277-34ff-a797-cc6dee00fbfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.79.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:22:d9:f3:0f:41:57:cf:78:52:26:be:1c:2e:9a:37:0e:73:
f1:3f:1c:d5:db:06:f0:e0:53:85:57:75:e6:70:87:e9:13:8d:
19:ee:3c:59:2d:21:2a:cc:39:16:a5:ed:06:9c:48:9a:4f:97:
fe:f5:e5:9e:3f:6a:d1:a3:db:ce:4c:b2:8d:00:03:51:72:74:
9a:7f:38:67:31:21:31:8f:3d:e1:a3:bb:2c:4c:55:a5:b5:5a:
0f:3a:de:f6:3e:2f:3f:55:e5:da:a3:91:5b:fa:a7:6b:c4:d1:
af:2d:e7:e6:e4:57:d8:43:96:b3:c4:35:d9:b8:7c:30:d6:8b:
fb:b1:09:c4:f1:81:98:6b:f8:cf:f5:2e:6a:00:5e:61:84:f9:
11:2b:4f:3e:17:a1:52:ce:b8:65:a7:be:4b:43:4d:03:bb:90:
99:0f:d9:bd:6c:ec:6c:3b:4a:e1:39:ef:f1:6d:8f:c6:92:07:
8c:f2:a8:27:69:e7:59:59:91:0a:5d:f1:17:89:21:e8:4e:c1:
11:a6:73:95:f9:25:fb:fd:87:1e:55:d9:6a:4f:bd:54:f2:63:
ad:4e:f6:41:8a:6f:ee:51:09:87:e9:67:d4:af:04:34:4b:94:
94:db:46:bf:4e:1d:ad:03:1d:70:48:21:60:ce:58:11:4f:37:
31:46:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:24 2025 by rpki-client