Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44c68431-61b4-331c-bd89-3308ae1c2aa3.roa
File: 44c68431-61b4-331c-bd89-3308ae1c2aa3.roa (raw, json)
Hash identifier: u8Nig3coXUcJDh42AxHeyeaYjQLl1mMzRV0/xhgXs6I=
Subject key identifier: 7D:97:55:47:13:F8:3B:0B:A2:11:83:6A:58:F3:30:2D:97:34:02:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E9577F4E413CDE1C632E13940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44c68431-61b4-331c-bd89-3308ae1c2aa3.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:95:77:f4:e4:13:cd:e1:c6:32:e1:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=e67d2d18-2e47-4758-8d3d-b6b61ab80e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:20:e1:d0:61:de:8e:0e:0d:9a:9d:e7:4a:
61:e3:17:62:57:ca:8a:a4:40:89:40:9c:2b:d7:73:
09:93:6a:5e:8d:47:ee:ab:0f:53:96:48:f9:86:39:
ed:dd:53:9f:d9:88:d3:9a:b6:30:9a:7b:ae:63:f3:
b7:3b:91:50:3e:b5:50:bf:6e:82:80:57:44:69:f9:
e9:4f:c5:06:2c:bc:fe:ab:77:66:99:f2:44:28:63:
fa:e5:da:b0:d8:08:10:8c:74:ef:82:59:50:bf:f3:
19:8a:a8:b7:26:48:fc:b3:d1:48:f5:52:0d:2c:b9:
11:9a:cd:22:9c:4b:ab:95:b2:52:dc:5c:61:7d:25:
3d:01:77:6c:a7:41:33:61:9c:71:55:10:1b:eb:ac:
72:19:e6:b9:00:be:4e:ee:ec:cd:28:9d:3b:07:7b:
e5:d3:fd:1f:14:45:b4:fa:cd:11:1c:24:81:85:85:
20:1c:bb:6a:8f:00:e5:40:69:11:0b:63:f4:ac:1f:
54:ea:98:63:9a:43:df:17:80:64:18:4e:73:b2:ac:
ab:4d:dd:f5:fb:32:ba:63:55:f1:12:a6:6a:b4:fb:
45:1c:11:58:6e:0a:cc:4b:42:87:a7:65:bb:25:af:
eb:a1:75:dd:e4:85:5b:39:83:a8:95:57:82:84:69:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:55:47:13:F8:3B:0B:A2:11:83:6A:58:F3:30:2D:97:34:02:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44c68431-61b4-331c-bd89-3308ae1c2aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:48:57:01:80:e4:1c:73:a2:5a:78:5d:1c:23:ba:81:34:2c:
0d:4a:06:17:2c:1c:7e:b3:33:d8:9d:79:c7:26:be:1d:9c:d7:
2d:8b:e2:b2:05:0e:2c:fe:a0:69:e9:d4:90:f7:4e:b6:69:78:
42:29:7f:ef:73:31:c8:e2:a6:23:a3:c3:f6:9f:8f:c6:68:5e:
25:81:8c:54:4b:3f:fc:e0:f6:46:ea:ef:65:81:12:73:3f:8b:
c9:a4:c9:55:92:5c:ed:b0:02:bf:69:0d:34:18:7a:8d:a2:f8:
4c:c5:b9:8f:57:f2:a7:fc:5c:b3:13:30:fe:cf:e1:de:07:a6:
4f:b1:52:9b:61:be:3a:e0:e9:ac:23:75:4b:9b:23:ad:ee:cd:
42:f6:78:da:8e:ae:72:d1:70:a1:d2:7f:9b:9e:2b:29:02:7c:
9e:98:ae:81:97:29:6d:de:ed:4c:a0:68:3c:20:fe:2c:47:85:
10:33:62:d2:ae:76:c5:30:f9:3e:06:a2:d0:1c:16:09:90:f3:
10:a2:e8:62:d0:20:fb:53:92:68:90:c4:0f:68:4c:49:90:02:
45:dd:5a:01:23:8a:b4:87:94:de:bc:d4:06:92:40:e8:f3:1a:
b1:28:2a:69:00:4f:43:28:6b:51:02:29:ff:4f:77:e4:30:90:
12:51:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:00 2025 by rpki-client