Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aeaf351-4b94-3304-a5fa-abd4e204d497.roa
File: 4aeaf351-4b94-3304-a5fa-abd4e204d497.roa (raw, json)
Hash identifier: d7tE4jrxOMdVwMghkip0n4mhUktAml4m1jCcl7CrpNA=
Subject key identifier: 2F:DC:5E:FA:A7:4F:B4:5E:06:91:86:F0:4A:AB:16:D2:E4:AA:C6:7E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBDAAAE7982FEA60808BADC90
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aeaf351-4b94-3304-a5fa-abd4e204d497.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 76.211.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:aa:ae:79:82:fe:a6:08:08:ba:dc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=44d07a2d-e48b-468d-98eb-0235ca1b1d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:40:3b:b9:08:31:e9:75:e0:28:ec:90:19:
2d:4d:db:16:cb:99:40:15:5b:02:47:4a:20:77:ff:
b8:be:ea:3b:6c:b4:e2:e2:bb:05:f2:80:85:a6:7a:
43:67:0c:cc:b8:05:25:7a:87:3b:1b:85:72:20:8c:
2d:77:4c:7b:cd:ac:f3:a8:23:ab:69:5c:ca:75:9a:
9e:08:ec:f1:02:87:b8:83:44:4e:4e:7a:98:9a:6e:
71:62:04:c4:41:31:41:f1:c5:6a:59:04:ac:c4:d7:
9e:49:83:7b:9d:39:dc:b1:bb:c8:51:e9:c5:ed:48:
2b:a8:35:21:e9:7a:69:74:42:08:db:02:fc:ed:a7:
34:8e:0a:64:cd:0f:e1:8a:74:a7:e2:43:01:d8:e8:
cc:04:91:25:e8:46:4a:24:2b:16:25:2f:88:7c:05:
2f:3c:07:85:d7:89:e5:aa:25:c5:8f:4d:f0:b5:4a:
cd:2d:42:f9:61:4d:af:0b:04:a2:f0:47:ad:5f:1a:
25:5c:1a:9b:66:10:4d:21:18:3a:9d:b8:0e:47:72:
6d:fb:bb:78:ec:33:70:84:2e:1b:05:65:71:98:b6:
0a:68:5d:08:0c:4f:7e:07:4e:97:6d:cb:0b:03:0f:
16:a7:8b:fa:82:bb:73:a0:db:63:0b:ce:72:0b:d6:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:5E:FA:A7:4F:B4:5E:06:91:86:F0:4A:AB:16:D2:E4:AA:C6:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aeaf351-4b94-3304-a5fa-abd4e204d497.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.211.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e4:9b:14:42:fb:db:9b:64:43:cf:8d:91:e8:e0:b7:41:21:
4a:e2:30:50:11:71:23:2c:d3:61:0d:16:52:53:b5:25:0d:95:
c6:30:98:af:68:49:16:1b:a7:84:e5:01:3e:ec:f3:13:86:7f:
c8:30:14:53:8c:a4:c7:c4:95:9a:a5:08:e3:94:c6:d0:bf:a5:
13:51:59:4f:37:4b:1a:8b:c1:14:92:30:24:0d:93:51:7b:26:
cc:c0:ba:2d:81:4e:6e:20:07:ab:73:96:af:ea:8c:dd:83:04:
dc:7e:a9:ca:b3:27:ea:c7:2c:c5:b9:a0:5c:4d:c0:08:f9:54:
8d:2c:8a:65:80:e6:f0:88:00:1d:3a:ec:c8:82:a4:67:83:13:
e2:88:fd:25:73:cf:d7:f7:4e:b9:6f:ae:3e:66:87:76:94:46:
f6:25:bb:0a:22:59:20:c2:5d:84:a6:a8:f9:40:58:bc:b8:bf:
9a:77:9f:e4:54:99:1a:86:5e:eb:87:43:59:6b:8b:07:b0:a4:
05:e2:4e:0f:0e:c1:c6:8f:4a:20:6a:11:e8:78:06:93:f6:82:
1a:90:fb:50:6d:19:72:84:b2:78:f3:d1:c7:76:12:90:ae:df:
8f:28:91:80:6c:7b:4d:97:df:68:81:ab:26:d9:34:9b:79:75:
bf:ec:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:38 2025 by rpki-client