Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3160402d-fc1b-39ed-a2c1-201324517384.roa
File: 3160402d-fc1b-39ed-a2c1-201324517384.roa (raw, json)
Hash identifier: 72598t3YKmXK5M+wfa1Z9wHxKnzlVgEL6PBGS0WlPYY=
Subject key identifier: 84:1C:46:1E:1C:69:46:2F:61:2C:DE:03:F4:11:4B:31:25:02:CC:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE4B1501CC3648C24A43C8C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3160402d-fc1b-39ed-a2c1-201324517384.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:b1:50:1c:c3:64:8c:24:a4:3c:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=d8db345a-75eb-4fe5-9a04-a924f4eca31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:32:b4:aa:27:3b:ad:28:72:dd:91:27:ea:
1b:1d:ab:8c:9f:65:d1:f4:c5:29:24:95:d2:11:bc:
9b:a0:df:4e:b0:c3:fa:c1:9f:73:40:c6:f8:d8:70:
db:f4:24:70:e2:00:b5:c6:72:22:52:72:34:58:f8:
c9:dc:b8:88:55:f2:fe:0b:0f:9e:8a:ff:f1:68:ef:
1d:64:0a:85:e0:cc:72:b5:15:58:22:cc:93:fa:dc:
e7:22:4e:b3:4e:8d:9d:9f:76:81:f8:4c:6c:d1:2b:
c1:fe:69:dd:74:e6:90:92:62:3e:80:e0:33:e5:18:
6e:94:ec:db:d7:91:a4:f0:96:26:f5:8b:d2:4c:77:
34:ea:cb:d7:b2:82:08:c9:70:74:85:f0:ed:e5:d0:
39:98:0a:dc:50:bb:12:97:e8:cc:96:3c:d2:88:b6:
f4:9d:ee:87:70:16:1b:73:c5:8e:49:03:e5:e3:59:
18:2c:6c:1a:e3:d9:bc:74:e6:30:74:6e:78:ed:d0:
9e:ba:ef:25:09:22:70:53:e9:e8:31:62:b8:82:b5:
86:df:99:a4:73:8a:b9:a1:b9:a4:60:77:f2:da:a7:
08:02:5a:29:6b:aa:9a:08:60:31:72:3c:39:cf:8c:
cd:df:46:61:6d:d7:a2:f4:c9:0d:73:4b:c4:41:ec:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:46:1E:1C:69:46:2F:61:2C:DE:03:F4:11:4B:31:25:02:CC:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3160402d-fc1b-39ed-a2c1-201324517384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:33:04:c1:23:e9:86:70:b9:c6:2c:d3:e2:29:99:9b:9f:52:
22:99:14:28:92:cd:7f:45:db:b4:45:9d:20:90:ab:4c:d0:05:
57:73:2a:9d:42:2b:7a:b9:54:a0:39:22:1a:63:66:f4:40:82:
22:74:9a:5b:b0:89:27:ba:ca:55:f2:ac:41:18:a3:fa:d4:6b:
00:b5:73:3a:63:f1:cb:8e:95:1e:60:db:cc:c2:90:12:b3:32:
12:37:a4:53:02:5d:bc:36:76:37:86:93:43:84:5b:88:8b:ee:
58:ea:9b:4b:93:72:00:85:05:d2:62:4e:96:e6:c1:34:16:1a:
05:b0:85:5d:e2:96:aa:2a:e0:57:8f:41:ab:17:43:46:d7:e8:
03:15:58:1f:8b:8b:a3:8b:e5:06:ca:35:8e:14:62:8e:8b:8f:
8b:34:35:f2:a3:14:89:1b:c5:33:6e:b1:a1:72:76:80:66:a7:
b5:5d:bf:97:2f:e4:83:78:5f:1d:97:22:5e:ed:00:a0:a2:ca:
7e:93:7e:e7:f0:e7:9a:6d:98:f2:7c:fb:2a:0c:bc:3f:2b:a3:
ee:3d:60:ce:77:47:85:48:19:b4:2e:62:88:7d:a4:49:72:6c:
cc:58:c0:70:00:5a:4f:4f:ad:cc:8b:be:58:d6:be:35:d9:73:
04:bd:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:55 2025 by rpki-client