Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fe34e44-7581-38af-813e-57be259b8567.roa
File: 3fe34e44-7581-38af-813e-57be259b8567.roa (raw, json)
Hash identifier: 7Fh9ruGh9hYSU87CVwy+VEygZNRt2XSih6k4L18rREw=
Subject key identifier: 52:B7:CB:2B:0F:B7:53:FF:F7:50:04:C9:AC:AD:D5:E0:9A:DC:0A:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE12A847F17F80718D8599580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fe34e44-7581-38af-813e-57be259b8567.roa
Signing time: Thu 11 Aug 2022 12:00:00 +0000
ROA not before: Thu 11 Aug 2022 12:00:00 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e1:2a:84:7f:17:f8:07:18:d8:59:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 11 12:00:00 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=b20ce6ff-bd2b-4ba3-9a5c-a4e0abf75af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:9e:4c:ab:30:04:b1:d4:5f:31:49:be:ff:
98:0f:d6:37:49:16:ec:aa:bf:a7:2d:a0:a6:38:e0:
09:0a:9d:47:fa:53:ba:e0:62:35:36:d1:17:c9:3f:
23:06:41:b9:f4:79:b1:47:01:dc:d3:4e:b1:fd:98:
fb:a0:6c:58:83:62:eb:fb:de:18:a7:58:8e:4e:99:
a7:85:90:a9:60:d3:0e:03:c8:ef:8f:2d:28:db:3b:
74:e7:89:c3:f4:80:45:cd:0c:82:73:6f:86:bc:b8:
43:9e:8c:9d:0f:94:3e:aa:c0:82:a6:4f:ac:67:83:
78:1f:63:34:33:d6:bb:68:9f:ec:94:97:e2:8c:7d:
1a:df:68:f4:d7:65:e8:e7:0d:27:d1:85:95:67:60:
76:ab:80:3b:bf:6d:65:f1:3f:66:3d:8f:5e:3e:03:
31:13:54:2c:3a:cc:03:4d:53:c0:21:e4:5f:55:28:
cd:b9:50:ba:a1:51:6d:b6:a6:18:bb:38:00:c3:99:
26:b1:ab:2f:4f:33:40:7c:a4:57:e7:27:0e:8f:cc:
d0:42:f4:99:ff:03:31:1e:4e:83:25:32:d3:96:35:
0b:4e:2f:24:83:15:1f:4e:5e:b2:73:de:05:f9:5e:
c4:a5:94:83:c8:63:be:b4:5e:35:25:23:01:d4:fc:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:CB:2B:0F:B7:53:FF:F7:50:04:C9:AC:AD:D5:E0:9A:DC:0A:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fe34e44-7581-38af-813e-57be259b8567.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0a:f5:49:01:73:68:49:44:3f:90:55:83:d4:65:02:3f:ed:
92:10:90:dd:a1:d9:4d:22:d2:d6:0f:e2:fc:60:37:f5:ea:0e:
9e:15:29:70:8d:f3:0d:fc:e5:c0:f8:a9:0c:63:da:5d:4a:b3:
6e:1b:b5:09:6a:88:2d:85:7c:90:be:33:1b:3b:e7:bb:12:27:
d8:fd:d2:ab:1d:1d:b1:d1:3c:1c:79:04:b8:1c:3e:c4:8f:62:
ad:6e:1a:50:ed:48:e3:27:50:07:fd:8c:dd:28:47:a3:16:b3:
12:d2:2c:bf:4d:02:c5:e5:d8:e5:c8:59:ae:7a:74:20:4d:97:
65:f4:0d:7f:14:56:c0:49:9b:9f:d2:6d:3a:29:12:f6:04:19:
c3:e2:c7:ff:c9:2d:b4:b0:67:6a:91:3c:5c:4c:74:56:b4:04:
57:8f:8d:fb:87:47:0f:35:36:b9:23:ba:1c:2b:e3:fc:aa:51:
4c:9f:3c:86:f3:ef:30:6b:84:c9:d5:e6:74:a1:d3:34:60:40:
13:39:f8:ea:26:5d:c5:e4:a2:42:86:39:1c:65:e9:93:02:b3:
ce:07:e9:92:d9:73:63:49:ce:12:9f:82:2b:bd:c2:2a:fb:f5:
b2:fd:36:1a:d1:55:df:ab:49:90:33:36:24:40:3a:b0:59:48:
47:38:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:58 2025 by rpki-client