Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbe59a5-83cf-374e-be2b-53ce44a641ca.roa
File: 2fbe59a5-83cf-374e-be2b-53ce44a641ca.roa (raw, json)
Hash identifier: vJJE2xnUgleCr1/sX6prQ4gWUfvN14XjEsD7fxk85go=
Subject key identifier: B7:4F:86:26:0E:1B:54:EF:07:7B:34:A1:E1:B9:FC:FF:10:F6:B2:C1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019AA3F11CA0BF6F47A947080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbe59a5-83cf-374e-be2b-53ce44a641ca.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 70.131.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:aa:3f:11:ca:0b:f6:f4:7a:94:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=69a89979-b20e-49cf-ad81-7ebf5ac865fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:ca:f2:6c:37:8f:91:74:78:dc:23:a1:b1:
d4:b2:f7:20:d3:71:a7:3f:2a:18:10:8b:d6:bf:a1:
33:d6:24:e2:f4:b3:04:32:d2:5c:a6:33:68:10:1e:
a3:60:d0:68:80:29:eb:d1:50:3b:e1:25:b7:fb:2a:
1f:2a:b3:27:01:78:46:4b:51:60:75:71:e2:fc:10:
17:2e:96:35:cb:b1:a9:4b:6f:44:f5:63:94:88:a5:
6e:83:6f:ff:8e:15:71:1d:74:3b:fd:23:0c:40:a4:
fa:23:33:64:4a:81:c3:c4:ea:b9:fe:a7:ca:1d:d3:
e8:14:32:db:f6:89:31:0d:22:7e:ea:76:a5:b0:41:
b8:87:b9:64:f2:b2:67:08:07:e1:8d:c1:ff:87:9d:
8d:5a:6c:ab:b5:e8:e4:06:25:6d:ca:2a:ba:0f:36:
68:08:3b:9d:47:3c:4d:a8:c3:cf:15:be:27:15:24:
90:51:da:a6:92:67:e0:28:36:64:bd:ab:d2:8d:9a:
81:f9:76:e5:a5:ec:63:b5:d7:fc:8f:88:e5:71:b9:
c2:12:e2:c5:b9:23:62:d5:78:b1:f9:02:b1:59:7f:
5b:37:fe:e9:ef:76:7f:a6:4b:93:e6:8a:34:05:50:
dc:a0:d3:28:90:d2:8f:07:55:94:67:eb:01:ee:3b:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:86:26:0E:1B:54:EF:07:7B:34:A1:E1:B9:FC:FF:10:F6:B2:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fbe59a5-83cf-374e-be2b-53ce44a641ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.131.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:52:09:1e:ef:61:fc:1d:a8:d7:c3:52:54:48:e3:4b:5c:d9:
11:eb:b5:8d:d6:84:e6:10:7b:13:0e:f4:b6:0f:a0:fd:46:4a:
25:89:4d:03:3a:ea:d5:cb:d6:5c:b6:c1:a2:bf:e2:d4:60:8a:
ba:24:21:f1:8a:1f:0c:e9:9c:78:0e:c5:e9:15:13:30:84:06:
32:64:cf:59:5f:42:21:3d:c5:27:25:0f:e7:90:25:c3:01:ec:
e8:f2:52:fc:8e:01:80:82:ad:87:fa:8b:0a:5c:73:d9:2d:d3:
e7:92:f7:2d:c2:ff:e8:74:d3:a5:49:63:87:21:70:35:38:4c:
fb:02:3f:70:b5:df:de:6b:f9:6f:2f:5b:bc:cd:14:1c:1b:1b:
71:36:81:b5:5d:98:b7:7f:3f:65:ab:2b:1d:07:ac:2a:76:e0:
1d:ba:1a:37:e6:af:e5:ae:73:98:d6:19:dd:ed:29:43:a1:3a:
eb:09:17:d2:66:23:5c:94:49:64:35:8b:55:b3:fc:3f:2e:09:
08:48:64:d9:88:95:35:9c:13:11:ab:6d:6e:26:f4:5e:bc:cf:
7d:91:98:24:b2:5c:c6:79:6f:21:1a:22:34:3c:e8:c5:83:67:
cf:ee:9a:0d:9c:61:1c:c1:bd:ea:89:1f:ff:ee:5e:fd:54:00:
af:2e:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:45 2025 by rpki-client