Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/095b9cee-4739-3844-96fa-05e24fe8e359.roa
File: 095b9cee-4739-3844-96fa-05e24fe8e359.roa (raw, json)
Hash identifier: I1WbC5rzRqVQBE0+LOgWjlUXDT+cK9zuLtVb2RuRsM0=
Subject key identifier: 84:4A:64:66:56:6F:72:74:94:F7:62:A5:B8:E6:CB:3A:27:D3:2D:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF692C71E3FD20082B5522620
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/095b9cee-4739-3844-96fa-05e24fe8e359.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 76.211.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f6:92:c7:1e:3f:d2:00:82:b5:52:26:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=29902a00-e5ae-48ee-ac80-0222a091acf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:77:66:f2:a5:b3:34:3e:a6:f7:fd:2c:d7:
59:90:9a:cb:16:78:37:ae:c0:7f:61:ab:fc:40:2e:
1f:ff:8c:d9:35:cb:96:fc:70:a1:c9:c5:c3:81:f8:
07:9f:af:3e:d7:26:70:ce:f1:1e:fe:12:52:62:0e:
18:95:dd:00:6c:a9:0d:88:d4:c3:c8:c9:24:53:5e:
dc:1b:4d:3e:36:6a:aa:8b:fc:d8:13:9c:eb:9c:a1:
43:16:2b:bf:b9:49:29:91:2f:86:29:96:00:43:9a:
4a:b5:67:19:cd:7d:02:71:85:b9:74:62:f6:b8:3a:
53:ff:35:2f:43:37:89:60:c6:8c:57:81:f3:81:07:
0a:e9:f8:d1:32:9f:ef:fb:a8:7e:76:42:49:92:fc:
cb:c8:63:9f:5d:22:ac:08:eb:cc:41:b2:d8:ed:dd:
b7:1f:89:ba:80:ab:df:3a:19:f7:80:3a:cd:e9:c0:
44:fe:e9:57:09:64:bb:cc:78:96:f9:e3:b8:7c:b9:
73:34:b1:92:2e:15:55:c1:5f:35:ee:58:b8:62:72:
f7:14:ea:83:31:98:57:e8:98:9a:3b:59:20:5c:c3:
b7:70:f9:3b:1c:0e:d0:55:7a:17:a5:5c:eb:0a:c2:
90:c8:60:15:fe:e7:62:1c:95:b9:ab:1d:21:61:33:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4A:64:66:56:6F:72:74:94:F7:62:A5:B8:E6:CB:3A:27:D3:2D:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/095b9cee-4739-3844-96fa-05e24fe8e359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.211.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:57:5d:a6:48:fa:72:f7:5b:c4:c3:c1:d1:e2:09:0d:da:07:
80:e5:02:80:1f:bc:36:80:23:34:92:32:12:51:79:bd:5f:f8:
96:f2:c2:25:b3:9d:a7:2e:c2:63:56:26:6a:69:7e:c3:e4:8e:
07:af:0e:4c:a3:c9:4a:8e:22:5d:48:7e:f0:0f:06:98:f3:e6:
1d:79:d6:9e:36:40:f2:87:c1:ea:21:76:7f:08:0b:d8:8b:f8:
c9:8d:ef:a3:9f:50:f7:ee:e1:fe:45:ad:d9:fe:3f:38:5b:f1:
51:72:7e:4b:96:46:55:e1:ea:bb:4c:5b:92:b5:ff:21:c0:ff:
f5:cf:06:03:3d:b5:f5:9e:aa:16:95:56:ea:ec:9c:b0:50:5d:
ae:3e:a0:b5:95:50:bb:9d:f4:64:fd:64:e7:5b:02:27:f8:7e:
58:77:86:7f:cb:cf:7b:29:80:fc:ed:15:3f:6a:93:e4:fc:38:
49:1b:3a:90:d0:db:5c:4e:6f:c9:98:3f:5f:29:b3:f9:d2:a1:
85:d4:5f:58:54:b8:ed:45:8a:c4:4d:a1:9d:59:db:d0:47:0d:
64:f2:e5:8f:4a:48:31:a3:8b:63:b7:cf:ce:c4:c5:0a:bd:cf:
c9:94:ac:15:c1:81:50:47:f8:53:e7:4d:61:01:0d:e7:d0:76:
88:62:a9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:38 2025 by rpki-client