Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20cbaafe-3c7a-3d40-bd70-3219a22366d1.roa
File: 20cbaafe-3c7a-3d40-bd70-3219a22366d1.roa (raw, json)
Hash identifier: /n0SiFqUsy3Iy8xl6rIeCv9M8hZObXLjQF8tgIt5YnY=
Subject key identifier: 3A:62:4C:AF:8E:8A:F6:2C:B0:53:13:62:49:6A:68:2D:E1:80:4D:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBCDF737073C2E9761DBFC980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20cbaafe-3c7a-3d40-bd70-3219a22366d1.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:df:73:70:73:c2:e9:76:1d:bf:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=3fdacf07-9b71-4c8b-83b6-466b3299d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:95:01:c7:1a:32:00:7c:a0:a1:62:11:f0:b3:
29:00:38:c0:e3:39:1e:3d:aa:11:a3:06:5c:be:62:
58:ff:31:1e:7a:42:df:ef:b3:37:7c:fd:44:c8:64:
30:b9:73:e9:18:61:c3:fc:bf:33:93:72:91:5f:26:
15:db:e0:e4:7d:d3:c4:99:97:ec:c1:50:64:bd:d1:
6a:11:d1:9b:53:9e:d6:cb:b7:58:57:32:06:fb:01:
a0:cd:c4:60:f9:be:35:af:64:77:50:45:b6:1c:d7:
3b:01:09:c3:3b:37:75:02:fa:28:23:44:a8:51:ef:
59:51:a8:cd:bc:a0:17:cf:11:38:c8:29:f7:97:d4:
46:99:d2:de:6a:3b:3b:69:d2:52:0f:5c:77:dc:6b:
bb:11:32:62:f3:3f:bf:ea:85:de:7b:50:6f:0f:84:
a2:8d:ea:93:9e:49:da:72:ba:f9:67:0e:28:85:83:
b4:8b:7d:21:65:db:ea:7e:75:47:30:50:c9:58:e2:
ef:96:a9:06:ea:02:fa:7b:03:45:73:f9:21:48:84:
4c:a9:90:ca:30:35:01:70:44:cd:4c:6b:4c:5d:e5:
64:06:90:16:03:fe:b9:6b:db:ff:6d:5b:e0:53:9e:
c0:51:59:6d:50:20:7d:81:7d:19:b3:7a:36:6a:9c:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:4C:AF:8E:8A:F6:2C:B0:53:13:62:49:6A:68:2D:E1:80:4D:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20cbaafe-3c7a-3d40-bd70-3219a22366d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:d5:6a:36:49:2f:a3:34:de:40:22:38:e0:64:c7:03:b2:11:
b4:48:1c:b9:a3:6b:e9:0b:e9:7b:5d:06:65:67:fe:d5:16:dd:
fa:9d:88:ff:04:1a:ab:51:39:80:cd:91:6e:b4:99:13:24:20:
ce:8c:2d:b9:90:96:f2:12:00:31:38:9f:29:ca:70:29:18:08:
09:4a:c0:fa:21:83:fb:83:d1:02:32:72:af:d6:fb:39:58:75:
c8:60:d8:88:0a:f5:0a:e8:98:c6:35:79:3e:91:67:e4:f5:ca:
f5:86:b4:c2:ec:86:e4:5b:b9:3b:55:d8:c8:63:7c:6d:4b:a8:
63:e7:fc:4f:91:22:99:10:ec:b8:fa:87:6b:2f:57:0a:d0:c5:
62:5a:22:1e:eb:1a:e2:2a:8d:be:6f:51:89:65:b8:69:43:01:
ae:58:5c:5f:08:24:1e:50:18:5d:b4:88:8a:b3:84:a1:d3:d5:
f0:d4:b8:d2:af:b3:dc:c3:7c:13:93:a7:9c:e5:d8:95:8b:cd:
10:77:f3:7d:2f:56:ca:43:6f:94:14:d5:48:6d:0a:f7:34:12:
95:37:8a:2a:c2:8f:a0:da:f5:f9:97:d5:48:97:2e:52:f0:6d:
3a:83:ba:f6:ca:61:28:6c:2c:dc:31:d6:1e:0d:9f:6c:3c:53:
a2:73:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:32 2025 by rpki-client