Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32303f0a-3be4-398e-b3ab-b3302682ebcb.roa
File: 32303f0a-3be4-398e-b3ab-b3302682ebcb.roa (raw, json)
Hash identifier: YKZ1peu9ASfLm5oFlYfgAqybGgByj6ykS7F4+OYDvzo=
Subject key identifier: 3B:40:4F:EB:C2:40:D1:E4:4F:A8:6E:99:CD:B8:09:C3:22:7C:16:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F804B45FD1E9E2E32A9FB1480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32303f0a-3be4-398e-b3ab-b3302682ebcb.roa
Signing time: Fri 07 Oct 2022 14:24:07 +0000
ROA not before: Fri 07 Oct 2022 14:24:07 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 71.143.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:80:4b:45:fd:1e:9e:2e:32:a9:fb:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 7 14:24:07 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=fe3347bc-a87f-47c9-bc60-1afff31b30e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:a7:c4:1a:39:c4:4d:84:45:fc:41:6c:c4:
1c:0e:80:72:3d:a2:05:d0:59:0b:da:e1:29:87:9f:
4e:39:86:44:03:c5:89:fb:f4:c8:87:82:a4:36:77:
a2:01:07:7e:3a:b9:b7:7a:00:5d:f3:81:80:a8:4e:
90:ed:9f:ca:3b:c6:fa:ca:cf:85:3e:a9:61:79:54:
5b:23:e7:58:42:3b:08:13:77:63:e1:7a:c1:01:84:
19:e5:fe:13:1c:ca:bc:88:ed:e1:3b:a4:57:d1:65:
f7:b8:22:a5:98:29:5a:af:20:23:94:66:e2:36:20:
fe:eb:a6:19:02:87:19:07:8d:48:5d:33:94:8a:1d:
09:0b:6d:d7:68:4f:2c:27:aa:8b:ed:f0:68:a5:8f:
44:b7:76:ad:2d:05:8c:1c:fd:b7:1a:c3:4e:b2:5a:
03:4c:e8:7b:e1:85:d3:62:0b:f9:f0:b8:5e:42:ce:
d2:20:00:95:93:00:fd:8d:3f:e2:35:f5:cd:07:ba:
8d:ee:91:0c:a7:58:a9:d2:ba:4c:a0:c2:03:d9:80:
6c:3f:0f:78:da:be:cb:62:c5:2d:8a:30:04:58:17:
c9:c0:07:5d:70:d9:75:8b:a8:59:8b:32:7a:c9:f6:
9b:c0:aa:ef:00:49:d8:07:a9:63:d5:17:8a:42:11:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:4F:EB:C2:40:D1:E4:4F:A8:6E:99:CD:B8:09:C3:22:7C:16:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32303f0a-3be4-398e-b3ab-b3302682ebcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.143.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:ca:d0:3f:72:e1:42:d1:f4:d0:c6:b1:20:13:82:06:98:95:
0c:28:55:a9:fd:dc:14:e9:42:27:4c:8e:36:25:03:c3:52:5d:
45:7f:17:b1:02:61:05:d8:68:a1:b4:7c:65:d9:f3:36:23:61:
20:6e:47:21:4c:d1:75:83:98:30:33:0c:2c:53:d9:c4:43:3c:
0b:d9:e1:0e:0e:6c:0d:80:7e:55:58:ee:86:f7:84:76:61:fa:
95:6d:c3:b8:8b:a4:db:02:e9:13:73:06:86:73:96:8e:98:25:
0d:44:a0:80:98:86:10:5a:00:0b:14:a7:e5:2d:1f:9a:e9:66:
7d:d5:ea:3b:90:b0:07:df:ac:16:fe:03:0c:75:4d:d6:79:9e:
d1:fb:33:1d:60:ea:a1:20:ba:55:c4:88:7a:ab:7b:5c:e3:77:
fc:a1:4c:7a:50:7c:99:9e:d5:87:f7:07:d4:47:47:3c:52:28:
c6:82:da:f0:2d:38:8d:92:e3:46:c9:f9:28:d2:c0:33:a8:65:
2c:ce:1e:1e:45:78:04:23:b1:2c:a1:9d:7a:8f:3b:a1:49:16:
d4:d2:6a:d2:c6:37:4e:e4:43:e4:21:40:bf:65:d4:5d:34:39:
23:24:1a:6c:c9:3d:20:50:78:66:9a:b6:f0:5c:78:a9:c4:c6:
23:84:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:10 2025 by rpki-client