Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36c87211-c294-32a5-ba8e-b1139c2f94b3.roa
File: 36c87211-c294-32a5-ba8e-b1139c2f94b3.roa (raw, json)
Hash identifier: xKiVmZbcFS1zD3mx6ulHApxonJXjvKtBPv0ZYj2vQLc=
Subject key identifier: 0B:E0:98:0C:47:DC:FA:63:5B:7B:CD:18:64:FB:2D:DB:DB:E9:8B:CF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F323E1680183856E23E7DAA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36c87211-c294-32a5-ba8e-b1139c2f94b3.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 68.66.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:3e:16:80:18:38:56:e2:3e:7d:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=2ff0c93d-8427-46b8-81bd-fc41fadb8000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2b:1c:b7:9c:2c:08:ee:fe:14:1f:6b:64:8f:
27:b1:8c:0c:d5:6f:db:87:da:c1:c0:b9:8b:3b:7c:
43:28:e5:2a:27:d5:da:2c:39:c2:6c:cb:b6:03:3f:
77:ca:d1:75:b6:71:62:b9:ac:04:6a:ce:a7:f2:d1:
03:ef:10:f5:1c:93:75:35:5b:31:c3:40:5e:63:6c:
54:50:36:3f:79:70:b7:0b:14:99:3a:49:c4:af:a5:
fa:de:1b:77:64:52:b3:a7:43:5e:fb:46:87:f3:9a:
24:77:0b:66:b9:f1:9b:ec:bd:73:6e:16:f6:3f:3b:
da:34:d0:85:c9:3c:8e:7e:ac:fe:c6:fa:03:72:a3:
58:f1:73:b4:2f:06:06:39:a2:71:1c:cc:25:53:ac:
ca:f8:a3:1c:3f:85:2b:4d:4d:48:f0:a0:eb:1b:97:
00:77:de:71:c3:45:9d:29:aa:51:ea:0c:6a:94:66:
5d:9e:db:8c:b9:9e:1e:49:9f:3b:2b:75:7e:78:97:
16:42:a9:9b:56:0f:59:eb:63:3b:b5:bd:04:f9:3c:
77:37:1c:25:09:f2:80:2a:e7:b3:38:5f:c5:40:9b:
e0:dd:1d:85:28:1f:5d:7d:0a:a1:dc:06:3f:47:e0:
47:af:14:d5:c1:40:b7:2e:e6:25:01:c0:ed:1b:9d:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:98:0C:47:DC:FA:63:5B:7B:CD:18:64:FB:2D:DB:DB:E9:8B:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36c87211-c294-32a5-ba8e-b1139c2f94b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:a5:17:31:b0:10:1e:f1:58:18:18:9c:fd:92:b0:47:ec:20:
af:cf:60:d1:92:8b:b0:6c:73:87:01:69:34:99:5b:fb:46:c8:
26:37:6f:96:c2:74:5d:75:30:b2:7a:9b:5d:5c:7c:ea:8d:40:
dd:01:97:be:93:5e:99:8e:de:71:6f:d2:f1:2d:df:65:09:61:
32:9d:2a:2d:5d:22:ae:29:76:68:5b:60:c3:09:67:6b:d1:24:
2f:d8:f0:ea:13:22:43:94:b6:cc:7e:5c:be:b0:39:43:2c:ee:
8a:15:82:2f:70:db:55:1b:c5:8e:af:e3:da:31:53:86:ba:12:
ac:c7:5b:94:f9:d0:ff:c3:7a:3f:57:f6:51:41:ea:bd:77:2b:
c3:92:5b:60:85:70:b8:96:fd:fc:ab:3d:17:6d:47:62:51:33:
0c:45:c1:0a:19:38:57:b8:74:83:e7:4f:02:4e:6c:20:20:5b:
1e:6e:f4:e1:13:58:b1:2b:dc:30:a3:a2:2a:65:53:b4:2e:e9:
32:2a:60:d2:7f:a5:c5:1c:9f:de:57:fc:79:67:10:8a:45:a6:
3d:ea:81:a3:06:5b:4a:5b:f4:7c:b2:34:53:9a:5d:af:ab:b0:
54:cb:54:33:3b:ed:73:31:c5:69:07:60:df:18:69:14:96:49:
7f:c8:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:35 2025 by rpki-client