Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/083a6a9a-32da-3383-b05e-715157344194.roa
File: 083a6a9a-32da-3383-b05e-715157344194.roa (raw, json)
Hash identifier: vHoXiiUoW8oJouxBJCYTsbB2yIt7qQKIax9JBmuF0cQ=
Subject key identifier: 62:3F:1E:77:C1:40:00:64:7D:3B:2D:39:63:31:CA:3E:60:54:9C:35
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401BD89C08B73F0BCDBAEAB580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/083a6a9a-32da-3383-b05e-715157344194.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:d8:9c:08:b7:3f:0b:cd:ba:ea:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=8d449105-e942-4089-912d-765a7c16ed4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:33:3d:d6:61:c8:8c:cc:0e:00:61:d0:83:
34:3e:02:b3:2a:a5:a9:d7:c7:8e:05:e2:26:e1:d6:
4f:fa:fe:89:dc:99:5e:75:e9:a4:e0:61:4d:71:05:
f5:6a:bd:81:5c:3c:de:a1:69:e3:d3:65:93:09:2e:
86:f0:c2:08:01:4f:e1:1a:79:e8:42:1f:4c:17:cc:
c6:a3:01:39:ad:e4:66:85:e9:bd:3d:b7:bf:f3:78:
03:15:fe:dc:2c:aa:df:f3:e7:60:75:1d:d4:06:9e:
34:3b:f2:2a:b3:cd:d7:d6:ee:a9:6a:8c:43:fd:7d:
0c:6d:12:c5:89:bc:3e:bb:d6:64:c8:ae:ba:2b:7f:
3a:d3:91:28:25:59:4a:ef:fe:e4:2f:c9:37:7a:f0:
15:44:a1:fd:33:d1:2f:f7:fb:3c:72:45:86:31:7a:
bd:e1:14:f1:26:0c:1a:56:dc:11:34:56:2e:d0:7c:
29:ce:67:8b:e4:16:e5:2f:15:67:da:2f:1b:60:58:
e8:17:34:31:42:c3:20:db:1a:f4:da:11:3c:4f:54:
06:69:9c:b9:f0:96:53:d4:84:a9:8e:51:c1:d5:da:
43:59:48:ed:70:cc:4a:fb:68:8e:2b:4b:84:48:76:
61:de:e4:55:36:71:d4:1a:20:52:f4:b7:fb:66:74:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:1E:77:C1:40:00:64:7D:3B:2D:39:63:31:CA:3E:60:54:9C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/083a6a9a-32da-3383-b05e-715157344194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:65:68:4b:ea:66:52:b6:b0:3a:ab:27:b0:2a:7e:11:e4:7a:
97:9c:96:f7:bc:d7:6c:df:e7:73:e1:c3:85:d7:9e:d3:31:37:
c3:64:59:9d:eb:37:1f:de:82:0e:e5:3c:eb:84:65:87:3a:d0:
57:3d:6f:d7:83:71:6f:ea:bd:dc:3f:bd:80:13:86:d8:53:3b:
56:f0:89:11:7d:fa:57:86:30:2d:7b:b9:62:85:ea:09:bf:76:
d2:31:4b:98:d5:6b:e3:65:63:78:cf:fa:bf:66:5e:f7:ef:cc:
4b:19:dc:36:c2:65:ae:38:ef:03:70:f0:8c:98:4e:ec:26:5d:
ca:55:a1:10:56:3b:08:ee:57:e0:04:d5:74:cf:95:55:67:c3:
22:74:0a:43:87:84:36:25:94:96:c2:e7:eb:d1:51:8a:00:32:
9b:77:1d:03:4b:06:3b:53:92:13:bf:f2:e6:12:14:e7:ad:54:
c1:76:dd:0c:78:e1:94:77:2a:9f:24:68:15:cc:c2:fd:3d:72:
b5:ed:a8:ed:a0:ba:51:d9:6f:ee:97:de:83:71:38:af:6a:60:
40:ee:c9:ed:8b:6d:f9:9a:b3:9e:7d:be:2e:df:1e:43:47:da:
ed:ab:d0:45:eb:ec:8d:03:59:de:ec:ad:73:4f:aa:bd:7c:8c:
22:a5:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:14 2025 by rpki-client