Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ea118bd-74d6-3250-a4c6-227251680330.roa
File: 3ea118bd-74d6-3250-a4c6-227251680330.roa (raw, json)
Hash identifier: 5/S/uB9wtJcRiz+33oWgKTRPn1Cxr2tWMfq8Re9EjlI=
Subject key identifier: 8F:0B:BD:4E:35:FD:D3:9B:EB:84:D8:08:59:B2:29:BA:E6:8B:8D:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DAB056B76E66C6DDE71C26780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ea118bd-74d6-3250-a4c6-227251680330.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 70.237.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ab:05:6b:76:e6:6c:6d:de:71:c2:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=f3002413-7969-4aba-862d-9faaf8a9a952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:77:87:2a:e0:7c:63:60:4e:a0:d0:dc:d4:
20:eb:b9:00:9d:02:40:e2:4a:87:49:3a:35:f5:1c:
2c:e1:7b:3b:1a:1a:49:a3:9a:ff:04:dc:8d:88:57:
bd:b0:07:1c:18:6a:10:7b:48:a9:b7:f5:c7:f7:49:
19:36:f0:3d:ca:aa:d3:7f:c6:88:4a:89:30:30:3a:
dc:74:78:c3:d8:eb:91:33:de:cb:d1:24:de:27:07:
85:f3:37:3c:6f:08:98:7a:2c:40:82:fe:1f:1b:15:
e4:aa:d2:05:81:11:ff:28:80:c9:06:5a:69:d6:2b:
e0:34:b3:38:8c:50:5e:d0:85:4d:bd:c9:65:9c:16:
48:d4:cc:e2:67:d6:bf:df:41:10:58:5b:26:81:95:
74:b1:4c:ce:0b:83:ac:41:6a:9d:b5:30:a1:35:be:
11:8b:59:e9:7f:9d:9f:d3:a9:b7:f5:7e:e4:02:4b:
64:80:5c:54:95:05:ca:a4:38:0e:8b:f7:be:8e:65:
9d:46:e1:79:d7:05:c7:6e:8b:2a:da:f7:05:80:b8:
91:65:85:bd:1b:5a:8f:cb:8f:11:60:5e:ec:d8:16:
42:c4:7b:c9:98:f1:1d:d4:29:42:2a:37:a2:41:d8:
14:3b:50:f8:f9:b8:75:f4:3a:4e:cb:67:0b:da:ce:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0B:BD:4E:35:FD:D3:9B:EB:84:D8:08:59:B2:29:BA:E6:8B:8D:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ea118bd-74d6-3250-a4c6-227251680330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.237.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:74:b1:2b:1f:fb:95:af:8b:88:e7:15:a1:ef:29:21:bb:54:
96:f5:cc:e7:54:14:34:c2:eb:70:7e:5a:0e:1e:5c:a1:52:a6:
e4:d2:1d:5a:10:ba:2d:49:a2:39:c3:01:37:2c:64:2d:d6:2f:
f3:9a:2b:b1:40:49:b8:da:59:df:4f:af:32:6e:ad:6c:97:e2:
d4:f6:c4:a8:ff:58:db:bf:b3:ef:b1:54:e2:ec:9c:e2:12:a7:
2c:99:47:3d:ff:a9:c9:89:6f:89:ff:98:bd:34:63:5c:29:4f:
fe:5d:55:6b:d4:a8:42:e6:6d:7d:00:40:70:3e:ca:5f:6c:53:
bd:d5:64:d2:8b:87:05:a2:e3:cc:d9:89:1c:24:3e:74:fb:05:
67:5e:b8:42:84:2a:4e:66:98:20:b9:52:d7:da:e9:08:3c:5e:
2e:4e:c8:aa:9c:3f:99:c0:b3:4c:0c:a8:dd:0a:2a:88:28:ec:
d1:28:d9:97:1a:f6:a8:9c:12:c7:66:dc:aa:f9:82:cc:2f:0e:
62:dd:81:5d:61:3d:0d:fe:b8:c3:d3:bf:55:42:01:7e:53:23:
21:a4:bc:b9:d7:9a:a0:43:e6:30:ea:9e:75:33:a7:b5:64:cc:
66:99:e2:a1:c2:f3:7b:85:40:d3:11:06:36:dc:42:c3:21:86:
1a:65:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:35 2025 by rpki-client