Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c530dd9-900a-33dc-bbce-f09de509416c.roa
File: 3c530dd9-900a-33dc-bbce-f09de509416c.roa (raw, json)
Hash identifier: GQVgQABV5qg08rKEbXygFWS1fr/+W55069BbIXHfxa4=
Subject key identifier: F5:B5:B4:15:A5:3A:E5:59:3B:15:84:56:F5:E3:28:5C:86:E7:D5:0F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0BCED43B6C44ED3F5E00BC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c530dd9-900a-33dc-bbce-f09de509416c.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 72.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:ce:d4:3b:6c:44:ed:3f:5e:00:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=47a11aba-50e2-4017-8421-7d090798af7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:53:21:8b:65:16:0a:44:bd:c5:1e:ca:55:
ec:e9:b0:3f:c3:2e:18:96:b5:3a:3f:cf:06:79:b5:
cc:dd:02:62:b9:f2:5a:7d:bd:cc:b2:e3:4c:ec:2d:
47:0c:ba:7e:df:83:e0:91:fb:9e:b3:1f:b4:e6:e6:
65:cb:9f:a2:df:9a:d5:41:08:c9:95:f8:8d:14:e9:
a5:ac:49:69:8d:63:74:1f:93:5f:44:b5:d4:69:04:
d1:55:f2:0c:e8:0a:0f:07:f3:24:86:22:6d:b4:2c:
bf:22:43:21:50:5b:ec:a0:02:fc:94:73:c9:bf:ec:
f0:6b:d9:f8:88:ab:00:a1:04:3c:25:41:b0:01:cc:
03:41:10:72:4c:26:2e:97:85:96:53:c7:f8:63:29:
ca:3a:61:cd:86:2a:73:ce:2c:f5:b6:6d:4a:fc:60:
bb:d8:bd:24:c2:52:4f:c5:14:7e:6b:e2:34:78:1c:
0a:4c:f7:ef:8f:f1:e4:c6:56:c9:5b:f8:39:10:f4:
4a:ba:86:8c:3f:88:fd:84:69:b3:4b:28:fc:36:04:
f6:4a:34:e5:4e:24:ad:42:53:5d:51:05:fc:ac:ea:
85:bb:eb:a7:ee:08:c9:bd:90:c9:2d:66:8d:1f:57:
8d:74:8b:fa:45:e9:d7:97:cc:4a:6a:fa:39:09:a6:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:B4:15:A5:3A:E5:59:3B:15:84:56:F5:E3:28:5C:86:E7:D5:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c530dd9-900a-33dc-bbce-f09de509416c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:12:55:af:22:30:4e:8a:85:9c:3d:a2:b7:21:98:9b:d6:2d:
0b:20:3e:4b:13:de:7d:29:7a:c0:f8:b1:91:92:83:dc:56:76:
8d:4e:c8:46:71:d1:be:f2:a9:08:e5:f7:96:82:ed:a3:ec:b6:
83:0b:bd:ed:7b:f1:78:16:85:d8:3d:aa:24:28:8b:ee:f3:2a:
c0:70:13:96:bb:f2:44:be:09:c6:3b:1a:5f:83:6b:f8:0c:10:
7d:3d:86:1a:b5:60:18:81:e1:07:4b:76:d1:e3:b3:b8:ad:4e:
5b:55:06:c6:89:81:01:ec:8c:d8:f0:4f:f7:e8:54:6d:6e:21:
54:9e:ac:e3:f0:7f:cc:62:79:cc:a8:16:81:b9:1a:c4:8f:6f:
01:3f:c2:2a:fe:91:f6:65:1d:02:74:2c:f7:49:da:05:cc:bb:
4b:c5:42:11:81:0d:af:00:70:50:19:02:f3:de:1e:c4:1d:cf:
18:97:d0:b2:df:cc:59:bb:e2:c8:7f:e2:6f:38:6c:0e:6b:63:
25:24:14:dd:93:a7:d5:84:86:e6:71:fe:a1:73:de:a5:38:e3:
86:9f:88:29:4a:ae:14:5d:b2:e7:52:6b:39:81:8c:e6:f0:84:
06:0a:dd:82:38:6f:04:5f:af:08:ff:96:8c:4e:97:d2:3d:ca:
6e:25:53:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:09 2025 by rpki-client