Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40b62bd3-cb77-3757-baa5-bf496416f06a.roa
File: 40b62bd3-cb77-3757-baa5-bf496416f06a.roa (raw, json)
Hash identifier: EUK+1u6DlDtVdlCJ89++roodBR80ykybPxGMDgeHWPM=
Subject key identifier: 24:85:F3:05:9C:BE:05:59:AD:A0:5E:6B:DF:19:B2:F0:C4:22:B1:89
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D59F2CDD3D26F1743150E1640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40b62bd3-cb77-3757-baa5-bf496416f06a.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 64.252.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:f2:cd:d3:d2:6f:17:43:15:0e:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=4f7f747c-c138-4c82-8990-3f10f6e9afc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:ca:fa:6b:0f:35:a2:08:37:f8:0d:29:d7:
24:26:02:1a:9c:79:51:1d:2e:d5:0e:8a:48:8e:14:
d9:bc:40:e5:e9:21:98:8d:7e:06:b7:19:c8:5d:39:
92:7d:a9:79:b4:59:ff:c9:33:c6:89:e2:66:22:a3:
cf:57:07:25:8e:9c:1d:c3:45:06:56:d1:11:32:74:
bb:05:9e:85:06:5a:3d:d2:a6:a4:9f:50:77:50:14:
fd:d5:c4:2d:24:4a:59:48:2e:57:0e:06:83:1c:f4:
9d:01:ad:e6:3d:42:68:47:28:7c:1f:b9:c2:b3:eb:
07:4a:18:80:27:4e:9f:7b:e0:3e:e2:9f:12:e2:4c:
0c:73:de:51:b9:29:48:ad:87:b2:d7:fd:6f:3d:8f:
a6:3a:8d:7b:53:b7:b6:5b:1e:ed:6e:61:68:62:38:
67:c5:64:5d:79:c0:42:39:78:94:f6:23:77:0d:f1:
97:d8:3b:c9:a7:29:9e:ee:23:6a:29:27:ab:a9:74:
b2:b4:1b:b9:05:ae:c5:42:e0:f4:19:f6:94:bc:d5:
ea:96:77:77:50:1e:ff:5f:48:39:d0:26:80:89:1f:
f6:c6:e5:23:c9:84:d1:47:0d:fd:46:72:c9:82:0d:
9a:ae:dc:fb:70:94:ad:c9:7c:41:76:ab:67:74:c6:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:F3:05:9C:BE:05:59:AD:A0:5E:6B:DF:19:B2:F0:C4:22:B1:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40b62bd3-cb77-3757-baa5-bf496416f06a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.252.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:21:c0:b0:79:08:3a:1f:72:95:8c:dd:ec:e6:5f:09:3d:3d:
4b:64:d5:f6:ea:e4:c0:ae:2b:2c:d1:95:25:cf:ff:7f:de:ed:
47:53:f2:49:db:ce:f0:a6:9a:dc:9a:d1:2a:a3:44:bd:e0:ef:
d5:02:ee:4a:55:9a:18:93:74:1f:bc:c3:d7:d5:7c:2f:1d:f7:
46:c6:b5:f7:5e:45:5a:c8:8d:10:65:48:75:6b:09:2b:05:5e:
fb:e9:b4:0e:e9:64:59:87:90:10:77:4b:39:2d:76:52:c0:07:
ea:bb:9a:61:45:eb:8c:7d:08:a6:81:41:6c:ec:9b:51:6f:80:
b4:87:72:16:bb:c5:bb:92:6c:f8:e3:8a:78:10:8e:89:11:73:
b9:c4:7d:51:e5:58:61:dd:8a:e2:5e:ae:23:35:0b:37:39:6e:
5a:98:0f:53:9f:23:2b:23:e2:d4:56:ac:bb:c0:fd:8b:8b:6b:
e3:cf:33:f5:83:4f:f1:9e:8c:7b:6c:fa:b0:c7:e7:88:b3:9c:
5a:73:27:28:c2:38:5e:57:da:5c:15:78:2d:c4:07:08:c8:e3:
61:83:18:a9:fb:6d:09:c9:fa:93:82:64:3f:84:ee:a6:69:97:
67:42:ac:96:26:cc:f6:31:e3:87:28:2c:71:ad:5c:86:5e:c7:
e8:ec:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 13:16:23 2025 by rpki-client