Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27a700e3-b642-3526-9dd6-5632a84e0ad3.roa
File: 27a700e3-b642-3526-9dd6-5632a84e0ad3.roa (raw, json)
Hash identifier: 8c/kE0aUoI/0LdTVaA8gK5YF7fMWaAxLIaPapDlz/qA=
Subject key identifier: 3B:10:01:8F:2A:94:13:37:52:46:35:3D:E5:9C:0F:4B:2E:43:BD:D9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAAEF5A012AD1AF563C3C8940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27a700e3-b642-3526-9dd6-5632a84e0ad3.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 72.44.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:aa:ef:5a:01:2a:d1:af:56:3c:3c:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=877f39f6-a735-4fde-89d2-9d212be8600f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:b6:7e:b5:c0:76:74:a1:c1:ff:bb:ca:1b:
b2:3c:95:7b:fa:ed:a2:b7:76:49:1e:82:65:26:58:
70:c1:5b:51:12:85:c4:42:d9:b2:7a:57:3b:b6:62:
7c:76:1c:d2:94:cc:01:7c:92:26:00:b3:57:c0:bd:
0f:f9:0b:64:ae:27:89:3a:d5:b8:8f:95:85:91:98:
83:0b:6e:5e:bc:b5:3a:59:db:25:a0:89:71:af:ce:
af:a1:c6:e8:ad:b8:29:e8:b7:b4:5d:c9:53:f9:0b:
af:7b:ad:2a:93:48:0e:bd:38:3b:69:34:2f:a4:d8:
81:50:cb:0b:9f:ce:6e:67:b5:ca:a0:1c:b4:ff:0d:
d6:52:49:69:08:2a:00:69:f6:8e:22:28:cb:72:91:
9e:7f:9d:a2:9d:c7:84:bf:21:01:40:85:4a:86:fa:
af:87:50:ec:86:62:a7:6d:75:22:99:9b:84:71:3a:
10:68:2d:9c:63:51:f8:3b:d1:0c:cb:de:d0:aa:3a:
5e:3c:6c:a3:50:bf:a9:8d:ae:9b:d0:3a:2f:75:f9:
5d:62:97:02:65:68:1d:a9:85:c4:32:44:be:f1:09:
84:07:d9:90:c3:c3:27:6b:be:88:f9:2d:e8:dc:53:
0d:9e:1a:93:79:8b:e4:a1:79:8a:84:fd:a4:09:97:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:10:01:8F:2A:94:13:37:52:46:35:3D:E5:9C:0F:4B:2E:43:BD:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27a700e3-b642-3526-9dd6-5632a84e0ad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.44.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b8:bc:00:4a:2f:53:56:82:e1:3e:ea:54:05:ed:96:63:0a:
24:48:82:7b:51:20:29:46:81:08:96:0a:e3:3a:99:7d:60:b4:
ae:f3:15:35:57:a5:a2:54:35:15:40:a1:2e:f5:3f:ed:bb:b1:
4e:1e:ec:3d:b4:a0:6f:e6:ff:73:20:d6:be:9c:fd:43:3b:47:
05:dd:df:25:38:ff:05:8b:33:1c:76:c4:9b:38:05:c6:2c:df:
e1:5f:27:e6:2e:a3:cb:31:06:bf:2b:8e:8c:ee:85:85:6d:b5:
83:6e:d0:2e:2c:2d:83:e2:fa:da:86:ed:d2:47:50:f0:51:4a:
ad:fd:bd:c4:b4:12:89:24:1a:e1:60:46:fc:0b:2c:b7:a9:3d:
8c:20:d3:2a:db:3f:37:0e:b6:be:5f:bc:1a:65:61:5c:64:17:
98:9d:d4:6c:1f:5d:8e:5c:5b:f3:a5:60:be:b2:95:6b:68:8e:
5f:81:6e:d3:d7:c3:c7:ad:e8:ea:8f:02:1a:16:16:6b:08:b1:
f8:aa:da:75:0a:3b:1c:1f:e4:da:33:4c:1b:3e:1c:ef:81:d3:
c1:05:d8:41:de:36:96:d2:f5:35:f8:49:98:9b:ca:bd:1f:8d:
ad:32:b1:a3:95:b0:f7:1d:f5:d1:f8:43:d9:c1:f5:a8:b9:92:
84:a7:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:53:21 2025 by rpki-client