Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11f68a2c-f853-3acd-8030-025910dec8dc.roa
File: 11f68a2c-f853-3acd-8030-025910dec8dc.roa (raw, json)
Hash identifier: aCgcNwkensI3jY6NWwUJRyizesplZoevgvoI31wCaww=
Subject key identifier: 4B:D2:98:5C:ED:1C:36:47:F4:D8:7B:F4:87:8C:3E:B7:26:15:74:71
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCF89E8DA4DD89BF23FCE42C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11f68a2c-f853-3acd-8030-025910dec8dc.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 71.141.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:89:e8:da:4d:d8:9b:f2:3f:ce:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=a2215ee0-ae99-4484-b50c-bc232f1bd383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:15:3e:ce:44:f6:e6:fd:9d:be:b6:61:9c:
11:7d:16:d0:a3:27:73:a2:13:a6:e8:c4:49:4a:97:
ca:24:b0:9d:75:00:dd:a7:84:6a:7a:23:c7:9a:38:
4b:e6:39:67:dc:b2:23:d8:00:12:95:08:7a:76:31:
ea:a8:84:88:26:ac:bb:18:5f:ff:04:27:49:60:5f:
28:40:f1:67:49:ea:d2:01:7b:fe:c3:95:ed:8e:47:
ad:2e:cf:a2:d2:fc:af:9f:ed:4d:db:64:70:12:ba:
50:1f:0e:db:43:3b:47:84:c1:60:c3:ae:9e:c9:16:
82:b9:75:cb:6a:1c:1f:0e:0a:8c:ec:37:1c:0f:cc:
c1:2c:5e:fe:23:39:11:cb:ec:c8:88:38:26:5d:e9:
59:dd:ed:f7:3d:57:93:6e:1d:0d:ec:d9:0a:b3:cc:
4a:50:e5:98:62:43:1b:d9:9f:9c:90:24:90:83:25:
ed:2d:f3:dd:f9:7c:a5:56:fb:0b:6a:1a:61:c4:f0:
ab:81:73:ac:67:e4:36:ff:71:73:7c:7b:42:56:a0:
93:e0:07:ce:6e:b1:24:a1:de:89:e1:66:c9:7c:45:
d8:9c:aa:83:56:43:80:00:a0:55:92:49:af:82:83:
e6:28:f1:64:17:92:67:34:d0:34:87:23:98:18:81:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D2:98:5C:ED:1C:36:47:F4:D8:7B:F4:87:8C:3E:B7:26:15:74:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11f68a2c-f853-3acd-8030-025910dec8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.141.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b4:1a:43:a7:9b:8b:3d:c7:52:15:5e:c2:0d:6c:9f:ee:1c:
9b:26:56:ba:50:2d:4d:00:40:c1:a9:94:1a:ec:f0:90:fd:b3:
34:2a:44:54:f3:90:29:5a:91:04:b4:45:e5:69:ed:30:41:01:
63:c9:79:a9:36:40:fa:41:dd:7f:0f:2b:bf:a0:6e:f4:77:d4:
8b:13:aa:a8:43:8b:01:3e:ba:5a:f2:12:96:d6:a7:5b:41:af:
71:77:1d:f9:16:cb:7a:a0:20:4e:b7:7b:2f:73:09:6e:96:79:
a1:51:d6:16:e3:31:57:3a:36:2a:4e:ce:19:d1:f3:fe:3f:2b:
ed:51:29:26:04:6d:89:e1:d0:46:8c:c3:90:4b:79:ef:fc:c7:
ae:64:9a:d4:e7:31:39:c4:8e:9d:a9:26:1a:bf:fb:04:b9:78:
da:03:b4:75:0e:48:5e:aa:92:b5:2d:41:78:dd:3b:62:c3:59:
26:4e:ab:c6:66:e2:73:3c:f4:13:77:e3:8a:9a:c0:44:f2:be:
65:94:78:05:3c:76:ee:94:23:36:87:e0:64:f6:20:d5:77:06:
c1:fd:2a:8d:ff:e5:23:aa:63:55:5a:1f:3a:11:8c:4c:1d:05:
ce:61:f8:fa:a0:9d:58:69:ba:25:82:ab:1f:39:0e:2d:7e:32:
09:3d:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:22 2025 by rpki-client