Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/068f834d-81be-3da2-ba6f-79f924013776.roa
File: 068f834d-81be-3da2-ba6f-79f924013776.roa (raw, json)
Hash identifier: oeSfbNY8sAtHerOzdd/B90ZSJhEHGpFDVk2eXuVAVzA=
Subject key identifier: 67:8D:3F:AB:A1:5A:81:86:CB:D6:78:EA:74:3E:58:C7:84:FD:3E:63
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE4C7D97C0E1FCA62607B1780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/068f834d-81be-3da2-ba6f-79f924013776.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:c7:d9:7c:0e:1f:ca:62:60:7b:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=a5166102-5d4a-4a0e-98a1-26ed738a1738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:c5:8f:c6:c2:5e:03:0b:e8:bc:8d:6e:0a:
2d:00:e0:0d:1c:7d:77:9d:9b:a6:02:3c:6c:d8:70:
af:a0:af:c1:22:53:37:43:3a:74:e6:50:5e:1d:f8:
d7:fc:cb:ef:2d:3e:4d:da:bb:64:b9:7b:d1:4e:f2:
b1:95:d8:59:d4:26:af:cc:15:fe:02:75:8c:78:b0:
a8:97:cd:0c:26:4b:9b:e3:f0:e2:17:b6:90:0d:eb:
d4:e5:e5:f7:1c:e7:2e:ae:6c:b6:42:7a:c2:55:c6:
f7:51:f0:06:11:5e:5a:b3:27:9a:e1:12:25:f5:5b:
92:1a:c3:24:9d:1b:90:97:4e:2f:6e:d2:86:c5:76:
a9:e1:95:88:10:02:33:be:bf:b0:57:3e:68:ed:11:
3a:1c:c2:d7:82:32:89:84:0b:8b:b2:4f:5d:99:d0:
1d:7a:83:0c:1a:a2:a2:2f:06:7c:97:29:6a:42:a1:
ad:7a:a3:ac:70:be:79:fa:fd:4d:f8:46:42:93:55:
59:fc:62:c3:94:58:03:c7:0d:ad:99:35:51:17:c9:
46:d5:61:36:61:b9:f2:a9:53:4a:17:6d:4b:4b:ea:
d9:62:fe:f0:44:38:98:3b:df:8a:77:cc:1e:8e:28:
88:24:fa:39:7e:53:bb:f9:00:6a:3c:f9:f0:fe:fc:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8D:3F:AB:A1:5A:81:86:CB:D6:78:EA:74:3E:58:C7:84:FD:3E:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/068f834d-81be-3da2-ba6f-79f924013776.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:64:d5:fb:42:ff:aa:f1:54:69:65:89:04:74:30:60:cf:50:
31:a3:29:db:85:e6:68:2c:af:6d:52:d3:ab:c0:ad:14:46:b3:
f5:89:e6:93:29:6c:aa:c5:8f:e1:98:72:9c:13:b1:29:01:ab:
b0:72:b6:f1:94:d9:f3:02:76:3c:60:0a:8f:3e:d9:9a:e7:1b:
9a:e3:0d:2d:fd:15:9d:32:1b:62:a5:7a:54:58:07:96:d4:f9:
a8:0c:01:aa:58:44:14:ee:49:fe:22:2a:1a:e4:eb:d4:85:e5:
47:02:2d:7c:e8:2c:32:7f:ae:11:a4:14:35:e6:24:9e:e5:01:
e6:a5:8f:d0:f3:38:d6:fa:33:7e:72:9e:79:c4:8a:1d:cc:90:
e1:fa:d9:06:53:3b:a6:b6:91:36:54:05:c3:93:3b:a3:46:32:
2e:49:6f:48:75:75:b9:d6:00:37:24:06:57:c7:b3:ee:39:1f:
dd:b3:cc:97:43:e2:dd:bf:0e:1c:7c:ef:2f:e3:3e:f9:32:db:
27:7c:0f:1a:cd:29:5c:20:0c:d4:31:25:57:14:1a:de:36:c2:
b5:96:15:9d:84:5d:50:79:b5:e6:c4:11:21:29:74:37:03:3e:
19:f5:aa:62:5b:65:7c:8d:da:38:1d:59:79:c0:fb:08:49:2f:
85:3b:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:59 2025 by rpki-client