Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bbb6964-35ca-3c0e-af29-8b0663f31cbc.roa
File: 2bbb6964-35ca-3c0e-af29-8b0663f31cbc.roa (raw, json)
Hash identifier: 3ppVEWAn+fJuIfAwhEt4ewlKO4EIxh5N//05lmj4p+E=
Subject key identifier: 78:3F:D6:9A:1A:4E:40:D3:5C:AC:26:4B:96:F2:67:6E:9F:F5:38:91
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5689303989465C72A1BCEB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bbb6964-35ca-3c0e-af29-8b0663f31cbc.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 67.220.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:89:30:39:89:46:5c:72:a1:bc:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=2f76bb47-a54c-43e1-aff6-97210b390125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:5c:6a:b6:2c:48:f2:e8:f1:03:df:56:dd:
d7:01:55:1b:eb:03:bf:40:a3:b0:de:22:8f:30:e9:
54:cd:61:10:d7:9d:58:45:b1:96:ed:41:63:20:25:
27:1c:ce:86:1b:c7:35:82:41:56:48:ac:04:55:b6:
bf:8a:9e:3e:66:78:dd:26:d1:9a:78:49:15:43:e8:
ed:2c:16:73:c9:17:b7:08:65:2a:9f:1e:bc:38:54:
ba:85:5d:63:0f:8c:81:c6:0e:72:f4:76:b0:ff:c6:
ce:15:ce:37:30:c3:1a:3c:18:f2:26:ff:d7:f2:69:
54:ba:4d:73:91:07:4f:75:1b:5a:94:af:45:d0:4e:
36:dc:83:70:88:78:b6:2b:a2:7f:5a:a9:6a:8a:6e:
8d:b1:16:aa:fd:16:96:6f:da:62:67:e1:f2:06:71:
62:3c:b2:d1:d9:46:f9:34:50:a4:de:c8:ba:90:d4:
d9:c5:08:19:66:7d:6c:56:ca:1a:0b:31:02:0b:23:
e8:43:69:6f:74:fb:87:f1:df:06:62:ec:bc:1b:5a:
8a:89:c6:53:e4:2a:57:32:99:25:78:c4:81:e5:ed:
6c:8d:16:70:9a:2c:1d:c2:9b:82:9e:f5:cd:68:d0:
2b:2e:aa:4b:17:b8:de:df:6e:a3:6a:b4:6a:6b:70:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:D6:9A:1A:4E:40:D3:5C:AC:26:4B:96:F2:67:6E:9F:F5:38:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bbb6964-35ca-3c0e-af29-8b0663f31cbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a7:2d:ac:09:8c:20:b6:c4:7f:ca:37:28:5c:0a:81:64:2a:
11:6d:a0:a2:62:b0:4e:40:f4:74:f9:6e:06:37:14:49:ee:c7:
27:ec:7b:3b:66:96:33:3f:40:ef:0f:65:21:cc:2c:e4:54:ff:
e0:44:a9:6e:f5:f9:39:59:d0:e5:ed:6f:51:04:f9:16:97:a1:
b2:2e:ac:e0:40:01:e9:c9:7b:d8:be:67:4c:ef:79:5e:db:9b:
4c:fc:10:6b:77:5e:1e:61:95:37:c7:5b:8d:8d:8a:a7:a9:b3:
51:2b:ea:3d:16:bf:4b:1e:4b:9e:11:50:b7:b4:a8:ea:ad:7b:
78:c2:40:b3:f8:dd:a3:69:aa:50:de:a9:f3:df:f0:a0:f7:0a:
9e:91:88:18:d9:3b:f7:4a:8c:ef:26:84:56:da:dd:f8:d6:55:
2f:02:06:5e:6f:45:9b:1b:49:1d:49:73:67:af:32:c4:4b:66:
eb:aa:2f:dd:5d:5d:55:5f:9b:5d:43:9a:72:e4:72:54:e0:48:
bc:9e:b7:d0:a8:8a:db:9e:19:2a:73:84:1c:1e:5e:14:16:51:
f7:04:dc:0c:24:5e:df:b9:a6:e1:19:1b:e0:7e:ba:a6:b9:87:
b2:59:fb:0d:dc:d1:47:86:aa:cd:6e:c6:df:ff:b0:07:2b:50:
01:66:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:44 2025 by rpki-client