Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31fa405b-b31a-39a2-9828-cbcbe2704bda.roa
File: 31fa405b-b31a-39a2-9828-cbcbe2704bda.roa (raw, json)
Hash identifier: 9Vpy9K8XF54aEWTViR5c4aNvOsEbHGdvHidrVAX3Vw4=
Subject key identifier: 14:D7:05:0F:F8:A3:B1:B6:BD:00:E4:6A:35:DB:96:91:90:2D:23:00
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404734908EA634F1CC4E864E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31fa405b-b31a-39a2-9828-cbcbe2704bda.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 76.255.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:47:34:90:8e:a6:34:f1:cc:4e:86:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=c7ce2c49-b5db-4fa0-b160-4251d69a32a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:48:a7:48:f0:90:5c:e8:b2:53:1b:21:f5:
18:77:35:85:b1:be:45:d7:01:c2:16:9a:9f:50:b9:
d7:79:30:c8:52:cc:b9:1a:fa:c8:cc:08:ae:ba:9e:
83:3d:86:b3:9d:65:4f:97:9c:ea:b5:c5:7c:dd:35:
63:cc:6c:fb:a7:be:0f:ca:91:90:12:38:29:a2:ec:
24:71:f7:58:3a:f3:23:ee:c8:cc:23:1f:29:fa:9c:
8f:a6:6a:3c:2e:74:63:2c:b4:08:6b:b9:3e:13:87:
f0:44:8a:b5:0f:68:38:68:80:ff:82:44:79:96:bb:
66:f2:73:02:f5:09:6a:e0:a7:14:60:cf:fa:19:c2:
eb:b1:2f:46:74:66:5e:15:d6:e3:f1:f4:f3:4e:84:
ab:1a:af:59:55:00:d2:d6:ce:59:5d:ee:5a:54:54:
82:2c:da:57:5d:84:b1:ea:80:d0:35:d9:ec:fb:9e:
94:13:59:03:13:60:4e:50:e6:cd:32:56:00:ef:12:
7c:51:e7:84:50:43:0c:ea:2d:36:13:f1:2f:68:49:
9f:8a:6d:9c:93:b8:45:1f:2d:a5:23:4d:eb:e4:46:
2c:61:9c:38:9a:f7:94:74:8b:f1:2a:81:92:a4:2a:
08:d5:af:b9:3e:e6:88:89:cb:50:d4:9a:c5:ea:0a:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:05:0F:F8:A3:B1:B6:BD:00:E4:6A:35:DB:96:91:90:2D:23:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/31fa405b-b31a-39a2-9828-cbcbe2704bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.255.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:e5:6d:b2:65:d5:47:e9:06:ac:0f:68:b7:33:93:f7:e5:22:
98:0a:74:97:79:a2:16:5d:db:1d:3b:a9:98:6d:27:53:37:eb:
a6:82:23:f9:fd:5f:38:a6:19:a5:0e:aa:b8:dd:37:58:88:53:
df:b0:4b:6b:54:e9:a4:32:cb:f5:24:ed:d0:04:99:d3:cd:e0:
d7:49:91:70:6e:5c:6e:32:4f:b0:49:ad:26:d1:c7:c0:de:5e:
23:6d:03:bb:50:9c:11:f9:3d:4c:49:95:02:86:6b:fa:34:7f:
62:19:19:2f:5f:9e:b4:13:49:3c:b7:b0:88:96:0e:2d:d6:e9:
ea:a3:d5:1b:39:78:aa:63:7a:a3:b7:e6:95:ca:31:2c:c8:87:
d7:4c:ca:e1:a6:32:47:bd:6d:d0:5e:ef:0d:e8:a4:98:69:77:
55:2f:c0:fe:fc:4e:d1:75:ec:4f:3e:15:b7:c0:45:34:b7:2d:
80:08:67:cd:cd:75:02:3b:14:56:b7:e8:5d:89:54:a6:39:d5:
85:3e:68:72:9c:01:c1:81:66:5b:60:a2:c2:7e:b2:d5:b5:bb:
af:c3:29:c0:77:08:b6:a5:fb:0e:a9:7c:14:5a:2a:74:ff:1c:
51:8b:a1:37:2f:97:78:f8:9f:d7:5a:0c:38:96:b6:b0:91:33:
36:6d:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:04 2025 by rpki-client