Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c89d4fd-385d-381b-bd69-e23b8d81612d.roa
File: 2c89d4fd-385d-381b-bd69-e23b8d81612d.roa (raw, json)
Hash identifier: 4jZKKcav+vp0xH1z/vX67KdfpyEMmKrzwIlPTd0k5AI=
Subject key identifier: 2D:28:15:07:14:1D:B8:2E:30:B2:0A:91:4C:C9:D4:CE:84:8E:D9:BB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019ED49EC9C96F322603E7A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c89d4fd-385d-381b-bd69-e23b8d81612d.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 75.47.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:ed:49:ec:9c:96:f3:22:60:3e:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=4ff0351b-3a19-4f6d-aa9e-06028ccf9e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:80:fa:0f:11:d3:14:b7:aa:63:38:0b:ef:
65:51:fe:50:53:ca:80:ab:80:fb:ad:7a:c4:a5:53:
a3:9d:f1:55:40:d3:d7:1e:0f:3d:9c:a9:e4:0e:1e:
e0:b3:e3:04:4d:d3:e9:42:92:96:22:b5:88:88:7a:
f7:3f:9d:16:de:7e:68:47:bf:8b:47:8b:59:75:2b:
f8:25:58:f0:a0:6c:ba:33:46:ea:d1:63:a0:f6:d0:
b7:d8:c8:25:b5:b1:06:88:dd:e9:cf:17:e5:58:a7:
4f:0f:36:b4:f1:82:84:54:9d:1d:4a:fa:38:d0:37:
36:99:f5:c6:43:d3:fb:32:0c:76:76:74:0a:fb:df:
35:24:65:39:00:cc:c3:ea:1c:44:c0:2c:ee:68:b5:
1d:92:a3:62:e2:c4:39:6d:71:c5:30:5c:63:6e:81:
81:99:5e:eb:2a:07:11:cd:9a:ca:17:e6:ed:65:c3:
eb:97:ec:fd:7a:80:17:2f:fb:53:79:72:a3:16:4b:
fc:4d:15:f1:a3:99:a4:d3:16:80:0f:e5:98:1e:8d:
70:7f:d9:e8:79:97:46:ed:90:f1:38:c2:1b:2c:3a:
25:86:fe:d6:07:02:79:3c:8e:db:86:9d:18:12:fa:
a8:70:5d:14:4b:88:9f:39:e2:cf:4b:4f:a5:fe:18:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:15:07:14:1D:B8:2E:30:B2:0A:91:4C:C9:D4:CE:84:8E:D9:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c89d4fd-385d-381b-bd69-e23b8d81612d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.47.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:27:01:8f:ef:aa:59:8e:17:ad:72:05:fa:6c:ce:97:4e:2a:
e4:8e:81:20:30:99:74:35:e5:f1:81:63:d4:60:46:c2:10:9c:
2a:d5:9f:41:53:fd:e9:b2:37:a1:5f:cf:71:3b:fc:72:c9:ff:
81:4e:4a:a0:b8:ae:74:53:f3:38:10:ff:39:6d:f3:9b:08:f8:
19:e8:95:01:a4:6a:6c:08:9e:3f:eb:19:c3:2a:55:1d:b8:62:
83:0b:12:f6:fd:ce:0b:c2:e8:b3:7f:61:47:95:bc:07:1f:5a:
8b:73:9f:d0:20:57:8d:b8:a2:80:84:3f:b3:96:70:84:19:16:
9c:a9:1c:f5:28:88:7a:cd:4d:ac:8d:c9:6e:a4:0e:2e:40:8b:
ca:e0:09:cf:07:c8:68:a1:ef:fd:24:06:46:e1:11:7e:d9:5a:
19:8a:bb:c9:5a:7e:b3:df:c2:3d:3b:d9:57:3c:14:c1:49:39:
46:81:c4:15:5b:8c:38:be:f8:33:be:9e:8e:ac:4e:2b:1f:ff:
77:1b:80:39:6b:01:6a:1b:33:8f:ee:be:1c:81:ef:4b:c4:52:
f2:da:91:9e:11:4e:df:50:b8:3c:d6:c1:b7:ae:12:28:6c:5e:
72:de:b8:ba:96:23:94:b7:82:cc:64:2c:a4:cb:72:58:3b:5c:
99:3d:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:38 2025 by rpki-client