Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33ba28be-9e27-37d6-9a8c-023d9c36d8cd.roa
File: 33ba28be-9e27-37d6-9a8c-023d9c36d8cd.roa (raw, json)
Hash identifier: 7App+3QqtjbV3LPx9F9/qGLluwRwwP7Ngmwh6KhZxTQ=
Subject key identifier: 76:A6:A1:A2:75:8C:9E:8C:D0:10:48:8C:C1:F8:C6:81:4B:60:B5:D3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCD2B66C3C96CC0217E1A9500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33ba28be-9e27-37d6-9a8c-023d9c36d8cd.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 170.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cd:2b:66:c3:c9:6c:c0:21:7e:1a:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=8a64c486-236e-445a-beff-48f1ab1644eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:32:f6:fa:25:a8:1d:2a:3e:bd:f7:4e:1e:b1:
54:ad:e9:c0:2f:ab:e5:f5:d6:74:98:65:29:c5:6d:
b6:e6:2f:3d:eb:33:79:52:ef:b8:22:a6:82:0d:9f:
51:0e:4c:34:c8:03:dc:07:83:ee:76:6c:09:86:78:
39:7b:f6:d8:68:90:e2:7e:18:9b:71:92:f1:bb:54:
c8:02:a5:a9:0e:57:1c:4a:0d:e0:e0:1a:c8:3e:2a:
e9:8d:5f:98:b3:de:4d:5f:f2:88:36:d6:6d:74:3a:
4a:7c:be:44:bd:eb:86:1f:f4:0b:4d:0e:4c:d4:ec:
52:a1:9b:25:7e:75:d2:2b:63:ba:87:d0:99:9f:78:
86:29:1f:7a:32:e9:98:31:3a:be:b4:cf:42:a9:d7:
ec:b7:25:96:a4:ef:74:d1:73:50:51:14:c1:3a:50:
ba:c3:f5:96:4a:7c:65:ce:92:1a:9e:0c:d6:e2:25:
e4:9d:ed:62:72:d2:30:ec:5d:5e:f3:a8:eb:02:2d:
78:5b:c9:c5:c1:8d:e9:15:d2:69:2a:f3:aa:5a:33:
21:dd:90:8c:80:ae:71:71:00:1a:a8:0e:f9:7b:da:
17:09:ee:de:0e:a7:6b:e5:da:c4:9b:94:1d:65:01:
e4:3e:20:d2:80:05:b0:e2:6e:62:b0:dd:a5:cc:89:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:A1:A2:75:8C:9E:8C:D0:10:48:8C:C1:F8:C6:81:4B:60:B5:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33ba28be-9e27-37d6-9a8c-023d9c36d8cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:b7:99:ca:71:54:6a:e7:0e:c7:8c:f5:ce:90:02:cf:a0:84:
2e:9a:e4:96:62:55:e3:70:7a:a2:76:8a:20:df:cd:a4:2b:9b:
fa:84:99:44:11:07:e1:01:29:35:03:31:cc:68:53:90:e1:09:
de:34:66:b0:87:ac:32:ac:17:97:ce:5d:e6:0d:3e:5f:17:75:
17:6d:41:5a:43:e6:37:7a:70:6f:9f:d8:d5:4a:af:a9:3c:1b:
63:d6:80:52:51:df:e3:68:f3:85:70:96:ce:80:f4:4d:16:92:
5f:73:f8:96:83:df:f3:77:66:74:59:5e:6e:3e:bd:8d:91:73:
a0:60:bc:1d:2f:54:a2:fb:75:19:18:fe:cf:71:09:a0:fc:b4:
b7:e1:9b:7c:2d:0c:ea:44:88:dc:a7:56:5c:3d:a4:cb:65:39:
dc:2b:31:67:09:65:6e:4d:84:9b:5d:ef:4b:32:26:13:8c:81:
37:52:78:1d:2f:77:b5:bd:7b:7d:2c:19:4d:3d:11:76:b7:70:
bc:ac:42:2d:56:73:e8:65:d8:2e:78:bd:0d:da:3f:d9:14:50:
ae:87:59:84:0a:44:c0:76:2f:10:e0:16:87:82:26:68:d0:d1:
37:a3:e3:12:8a:de:4b:43:72:ec:81:00:bd:bd:6f:33:bf:30:
dc:73:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:20 2025 by rpki-client