Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bac77cd-c842-3bda-a465-e379829fded6.roa
File: 3bac77cd-c842-3bda-a465-e379829fded6.roa (raw, json)
Hash identifier: xFOZnMPUL3ak6REIcJ1J5qxirJhiPiJKutSC/TiklZg=
Subject key identifier: F7:56:C6:D3:A8:35:B1:58:2B:A2:74:5F:4E:BC:04:F8:41:7F:5E:34
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBCDF66C0B5C2405E34CF5980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bac77cd-c842-3bda-a465-e379829fded6.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:df:66:c0:b5:c2:40:5e:34:cf:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=2be80180-7af4-4681-8a21-5fe0eafed0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:c5:9e:f7:39:24:9d:05:40:47:a3:e5:b4:
7e:14:6a:54:e1:65:c9:92:5b:bf:6f:e5:da:00:36:
14:e3:c7:3e:da:4c:75:72:50:63:bd:d1:e3:ec:ec:
23:f7:66:27:c4:ca:7b:33:3e:92:4b:5c:59:07:90:
b0:2f:48:01:91:f6:b8:8a:cb:9a:63:54:2f:bf:91:
63:35:ae:0d:92:03:ab:34:a0:da:a0:51:a7:46:ab:
d6:55:00:94:97:bc:f5:13:eb:8a:74:14:c7:47:be:
5d:88:2f:5a:e0:58:68:84:4c:a2:01:3f:f2:6c:b7:
9c:d5:56:82:1c:7e:77:9c:6c:f8:75:fe:22:06:9b:
ee:4c:ad:8e:f1:0c:6d:dc:80:8d:5a:b0:cb:e4:1c:
f4:66:91:79:b7:f9:66:41:c6:48:d3:0c:46:c0:dc:
11:d9:7a:ba:61:11:d4:22:05:ae:5b:bc:bc:ba:ae:
db:e5:01:35:78:4d:b6:52:3b:0e:18:46:2e:5a:0e:
5c:a5:12:be:d6:17:eb:19:cf:ea:dc:a7:16:aa:81:
4e:d6:4c:78:3d:e2:17:a0:95:18:0c:43:ae:12:78:
b0:16:b1:b1:79:8c:3a:3a:65:7c:91:17:8b:ef:42:
65:8e:16:af:ed:ba:9e:92:78:b4:8f:4c:8d:d3:0a:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:56:C6:D3:A8:35:B1:58:2B:A2:74:5F:4E:BC:04:F8:41:7F:5E:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3bac77cd-c842-3bda-a465-e379829fded6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:60:4a:d9:b7:e0:c4:f1:65:a3:5c:49:de:86:31:7a:63:2b:
cc:5d:78:7d:e2:1c:61:b4:a7:28:16:7c:54:fe:59:f1:48:60:
be:b2:c6:35:07:3d:7e:6f:04:4c:1a:9d:94:7b:33:34:75:2c:
09:95:ac:a8:b6:e2:97:c6:e6:84:da:0b:ca:8f:bb:54:02:d9:
a1:77:aa:6a:4a:5c:67:01:bc:d7:a0:92:78:a6:98:d1:21:d6:
a9:03:61:c2:b5:24:e8:af:99:e5:f3:5e:12:82:e7:74:28:d8:
5b:bf:64:e0:e0:1d:7e:3c:d1:b3:5a:86:39:5d:58:7f:58:21:
ff:1d:f5:6d:13:17:f8:e8:cc:e3:1a:ab:cd:55:44:ed:40:9d:
f8:4f:85:5b:e9:86:17:78:44:3c:2d:90:05:a0:d2:e0:49:17:
2f:46:c2:ee:4f:93:ad:48:57:fc:cf:b4:db:77:14:19:7c:17:
1d:71:4b:d6:98:a2:08:b0:de:b7:c5:b0:ef:d9:86:5c:aa:ac:
62:9e:ae:8f:15:ac:92:58:de:cf:29:8a:18:5d:69:d9:4c:f0:
dc:5b:92:a1:f0:55:94:3f:77:f7:06:01:37:24:ac:90:41:19:
90:d0:65:7e:5c:48:d9:c3:af:6f:b5:d8:18:b1:4f:f7:54:e2:
1a:f2:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:41 2025 by rpki-client