Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09953811-1abc-343e-8a4e-4191f86d131c.roa
File: 09953811-1abc-343e-8a4e-4191f86d131c.roa (raw, json)
Hash identifier: Sf9HMGThcetjqg5DC5Kb4uM1sKxtzFQXyeSWiLiGMWc=
Subject key identifier: BA:3F:45:53:14:89:5E:59:75:ED:50:36:79:AD:5E:8F:60:EC:DE:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F322F29F665ACE6882A53F800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09953811-1abc-343e-8a4e-4191f86d131c.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 70.236.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:2f:29:f6:65:ac:e6:88:2a:53:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=f1ebdfb9-5400-4a25-9da5-dddbba21268e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:6e:b3:98:df:82:d9:6b:f9:f4:c3:9b:b6:
2a:11:91:cd:ab:a0:5b:30:1d:79:35:e9:84:3c:28:
75:a3:39:74:8e:58:3b:5f:93:9d:29:1b:c6:5e:1a:
4f:73:53:a5:c7:8c:a7:7f:fa:8a:5d:9a:d9:dc:1e:
96:90:0a:31:db:e5:36:85:2b:b9:8d:be:c4:76:91:
0b:03:00:f6:85:53:b7:18:40:18:71:99:6d:a2:b6:
0d:be:8b:bf:12:1f:a9:70:4b:e1:22:31:8f:d1:fc:
b5:98:b8:67:80:2d:83:5e:d6:25:ec:09:70:dd:89:
65:aa:19:57:f1:15:14:a9:5b:2c:84:bb:90:39:8f:
57:07:72:cb:b0:3d:c9:41:89:11:d7:4a:ba:21:8c:
17:da:6c:09:d3:72:88:a7:4c:18:5d:82:3b:a6:72:
ee:3d:ba:55:d0:ad:11:80:71:9a:dc:b6:61:1f:6c:
86:f0:79:f8:70:94:c6:48:85:7f:50:39:e1:0e:61:
aa:69:71:52:43:13:13:5e:9b:80:c1:bd:d4:b0:eb:
2a:c5:6b:b4:c9:dd:4e:99:cd:a7:85:2e:0e:ec:28:
c6:11:f2:d2:cb:ba:ee:0a:0b:cc:b4:4d:bb:c4:f0:
4a:7e:26:77:a7:17:04:69:9a:6c:0f:52:cf:19:55:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3F:45:53:14:89:5E:59:75:ED:50:36:79:AD:5E:8F:60:EC:DE:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09953811-1abc-343e-8a4e-4191f86d131c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.236.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:85:d6:3e:d9:c0:b3:7d:71:91:2a:85:8e:93:b9:7c:de:d2:
b2:8c:b0:95:d6:27:10:38:fb:43:16:b6:96:dd:7a:0a:cb:cc:
fe:09:73:c8:13:4c:79:54:7f:fe:90:ac:ef:2c:5b:92:90:7a:
b9:65:19:6f:7f:c0:2b:80:1b:fe:49:8e:08:d8:7e:0f:ef:91:
75:a5:50:e6:8e:a2:62:5b:c8:40:8e:57:62:cb:e2:79:2a:4e:
b0:d1:61:cf:93:12:19:f3:f5:ba:eb:0a:4c:a6:bf:17:2e:3c:
71:cb:cb:ee:d1:5d:e7:84:87:d1:9a:82:c1:a7:74:3f:40:97:
69:3c:27:2e:4f:3d:62:cc:08:88:24:4a:c6:26:7b:7a:81:16:
9a:5c:d9:03:a2:26:2d:3e:0e:50:7f:4a:32:7e:51:18:0b:f6:
12:de:9d:f0:29:fe:f6:24:c6:60:10:a5:8f:1d:58:98:13:75:
a5:3d:94:20:1b:59:52:7c:ed:91:16:69:5a:f7:ae:1d:8b:90:
09:fa:ee:31:5a:6f:b6:bc:af:0e:ce:dc:68:cd:60:5d:39:bc:
e1:85:22:86:7c:ae:a7:c9:56:1c:4c:94:82:2f:60:d9:91:21:
59:99:07:83:d2:33:87:3f:3c:c7:b3:78:d1:03:ec:36:fd:e7:
5d:ab:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:25 2025 by rpki-client