Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28830cbf-5cf7-388d-9327-6d292321fe3b.roa
File: 28830cbf-5cf7-388d-9327-6d292321fe3b.roa (raw, json)
Hash identifier: g02+Oy7Abfry54J2m+p6Uxztqv5bnMaA/ck9GZNUBQk=
Subject key identifier: 8F:F1:FC:68:EC:4A:B5:CC:E8:C7:69:2E:DE:D3:F3:B6:06:95:06:31
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840392F0D0896DEE7CA628FFB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28830cbf-5cf7-388d-9327-6d292321fe3b.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 68.217.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:39:2f:0d:08:96:de:e7:ca:62:8f:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=a75f0bff-4608-4dd9-89ad-09de7d12fd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:9c:7c:25:e4:dc:ef:f2:f2:cb:0f:d3:7e:
9a:61:18:b7:b2:3d:8a:4e:b4:8c:9a:0c:a8:4d:76:
9b:30:18:f7:6c:7f:e1:d6:40:0e:bc:61:8b:13:65:
b1:f3:dc:42:50:64:dc:bf:68:25:c1:f5:ba:77:a3:
88:4d:05:cb:54:cb:36:41:08:f3:8a:4e:2e:33:ad:
b8:a2:bc:bd:8f:af:49:e6:07:15:fe:97:54:87:b0:
1b:78:8b:78:60:50:cc:1a:f9:bf:a8:ff:ae:d6:5e:
de:3d:35:2e:8d:19:68:b8:30:53:e9:20:09:90:22:
63:d8:d3:71:c1:cf:af:d3:8f:fb:c6:ac:97:38:bb:
24:b9:f4:5c:1e:ca:15:a1:12:62:84:a5:60:63:1f:
96:b6:92:1b:f0:8d:b4:bb:4c:63:29:6b:62:00:24:
b7:a9:63:0f:55:36:37:b6:cc:e7:0b:6f:de:d6:43:
ef:76:fd:20:a0:2f:59:56:b0:62:d9:7f:29:7d:4f:
e8:7d:de:cd:a1:62:58:ca:01:7f:2a:9c:02:fa:ac:
4f:43:23:30:28:ef:83:12:c1:df:f9:6a:71:0d:32:
9b:a0:87:8b:da:05:59:0d:fd:e3:c5:08:3f:2b:50:
0f:7c:89:66:30:51:ca:f6:86:73:81:82:9a:e8:bd:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:FC:68:EC:4A:B5:CC:E8:C7:69:2E:DE:D3:F3:B6:06:95:06:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28830cbf-5cf7-388d-9327-6d292321fe3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.217.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:75:75:6a:38:a9:1c:5b:05:a3:53:16:e7:25:ed:a8:67:35:
3e:fa:74:83:a1:2a:c0:fb:75:5d:d7:8d:f5:3a:f4:03:f5:64:
41:94:cf:46:dd:41:5a:19:c7:7e:94:27:41:35:97:4b:bb:e7:
35:a5:67:63:27:5c:b1:48:40:e4:d8:e2:70:06:f8:27:5a:c2:
97:ca:ad:4c:a4:90:33:75:aa:84:b1:63:a5:94:be:f7:17:3b:
31:2c:85:1c:e6:d2:11:55:08:e6:26:fc:74:fc:f1:7f:1d:4f:
29:f9:01:c9:78:b9:c9:a0:3a:95:94:43:6d:58:8b:d1:20:cd:
db:c4:91:3a:44:87:76:fb:64:12:ac:5e:4e:8e:4c:9a:10:d6:
41:e6:3e:d4:5f:aa:cf:48:23:85:24:0b:bd:71:e6:c0:a4:0e:
a5:1f:f0:ac:3f:07:dd:c8:e6:66:00:af:1b:f9:57:c5:41:46:
d9:01:32:6a:ea:87:a2:6a:4f:cf:63:bf:f7:c6:07:00:4c:ff:
17:da:04:cb:81:e1:3a:56:a7:90:d5:9a:0a:d3:1d:8a:33:5f:
d9:d7:b5:be:c1:14:41:42:06:a4:ad:5d:9e:8f:0b:3e:63:5e:
97:0d:dd:1b:4f:f1:b1:38:fc:7b:e2:bc:bd:7f:11:c4:f4:ed:
9e:ef:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:05 2025 by rpki-client