Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3afe981d-3e65-31a4-9c52-9409e11e1e5e.roa
File: 3afe981d-3e65-31a4-9c52-9409e11e1e5e.roa (raw, json)
Hash identifier: y+GNfuuSC/tAv+8iCD0i6uZE5dTcYS234lY0twKK9zU=
Subject key identifier: 0B:31:8B:F8:2D:3E:EC:E1:AE:C1:FB:59:0A:F5:E0:A7:91:CC:C1:EB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F32114E08C0C62603C2651F70
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3afe981d-3e65-31a4-9c52-9409e11e1e5e.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 75.45.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:11:4e:08:c0:c6:26:03:c2:65:1f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=87cf9d41-85b8-475e-80d5-ab5a4c7ed281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:b2:ab:14:96:44:52:32:a1:3e:c3:17:2d:
77:39:54:50:e4:c4:28:ec:f3:38:24:14:37:9e:0b:
66:95:b1:35:02:16:10:5a:ae:bb:97:a7:eb:d7:9a:
06:7e:d9:16:46:2b:ee:a0:35:0d:cd:77:4d:ae:bc:
e8:0b:4f:bd:5f:63:bc:ef:f9:fd:81:19:98:9f:87:
35:1e:75:39:16:50:d8:c4:05:49:4a:21:57:db:e0:
d9:78:a4:b9:7c:62:2c:b4:33:39:61:96:cb:85:05:
3e:ca:0d:0b:b7:df:06:43:3d:33:2a:f2:47:ac:b2:
4b:67:73:4d:c1:b1:e5:74:4b:f8:26:48:b3:ca:11:
6f:69:6c:45:71:6f:26:81:5e:bc:50:7d:0b:07:58:
40:bb:7d:7c:6b:d9:7c:45:a5:54:86:7c:b5:82:dc:
b5:f8:0e:5f:80:99:bf:8e:b6:77:96:7e:33:ab:5b:
fa:cb:d2:6e:0d:8d:ba:45:4f:1b:57:74:84:7e:85:
93:39:43:72:77:1a:10:0e:3a:fa:81:78:a3:55:f2:
d9:ea:b5:d5:03:80:30:07:44:05:ee:6f:11:8e:29:
d4:9f:2e:f0:18:7f:2b:46:09:90:c0:d4:6b:31:ab:
0b:da:8d:0d:ba:73:cf:66:37:31:a6:7b:87:47:bf:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:8B:F8:2D:3E:EC:E1:AE:C1:FB:59:0A:F5:E0:A7:91:CC:C1:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3afe981d-3e65-31a4-9c52-9409e11e1e5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.45.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:0f:62:a3:9e:b2:55:52:f1:d8:2c:54:9b:3f:45:ab:73:89:
c0:55:2d:cd:35:fc:2c:79:95:9e:a6:be:71:53:28:d5:04:bc:
d4:bd:cb:40:fa:1f:b2:dc:8c:20:bf:89:b5:1f:04:d9:9e:ca:
31:ac:73:aa:77:19:fc:d5:df:34:6a:8d:a3:4c:e0:d5:6a:95:
ca:be:9b:72:c2:49:2b:c2:b5:68:bd:dc:06:ad:06:22:1c:e7:
c8:fa:3e:f0:d5:ea:6c:c4:04:67:da:40:cb:c1:a6:65:f9:0f:
a3:43:fe:db:47:20:5e:67:9e:b0:c9:92:1a:7b:1a:26:1c:75:
13:2f:95:da:79:3d:64:be:39:7e:66:69:2c:02:14:94:3a:24:
f4:ed:bf:29:01:cb:e6:4e:3c:41:de:c1:97:ad:60:3d:93:b7:
65:9b:19:66:fb:f4:24:13:ab:de:07:2a:f4:30:15:7b:fc:24:
cd:72:31:6d:8e:17:3e:b9:cc:0f:7d:ed:b6:84:7f:3b:36:d5:
fd:15:f2:71:08:4b:cd:8e:d6:34:ee:e1:f8:1b:52:38:36:eb:
86:44:12:e4:d8:0b:62:d6:af:ac:49:fe:2a:a5:3e:db:73:a5:
cb:08:09:85:49:9c:2d:b4:83:50:3a:fa:f7:4b:4a:00:ca:bb:
1f:cf:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:05 2025 by rpki-client