Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf272c6-c10f-3880-8d83-849b4e0a3aae.roa
File: 4bf272c6-c10f-3880-8d83-849b4e0a3aae.roa (raw, json)
Hash identifier: whGMxXUdI0H9mPMHnr9JJjFjmEbMYxp6NDqNwx5Zsfk=
Subject key identifier: 88:E1:D0:5B:FB:A3:7C:87:2E:59:55:FC:51:B5:BA:34:95:FE:90:51
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F61A04530A46FBB3F262780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf272c6-c10f-3880-8d83-849b4e0a3aae.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 70.240.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:61:a0:45:30:a4:6f:bb:3f:26:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=0693c984-44b8-4399-b67d-ca596cc4d569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:53:aa:ed:e8:f7:c6:35:24:b4:a3:2e:6e:97:
e4:b9:01:59:cd:aa:a0:d7:ce:2b:6d:1c:d6:ae:61:
e5:78:b1:3c:0f:97:24:6a:55:e7:53:7a:c2:18:0b:
24:44:2a:f9:32:51:d1:02:3b:e1:8a:e7:cc:ec:c7:
c6:c5:3b:e3:0b:c4:f9:01:51:3a:67:31:e6:00:76:
e8:da:72:9c:0f:d9:e0:91:71:5a:8f:a2:21:12:e7:
37:b9:11:94:2b:de:ea:10:07:fb:04:70:da:24:ad:
12:85:10:1a:cf:f1:ac:eb:33:ea:3d:27:4c:23:e5:
21:40:9b:45:07:1a:0f:c5:94:d2:9b:cd:51:5c:d5:
8c:92:17:d9:71:c3:25:4e:f3:20:a5:ed:e0:4a:55:
1f:4c:37:46:c3:a3:35:52:03:f9:75:b7:4f:c7:31:
62:c1:e2:b4:ce:78:71:09:48:ff:25:88:06:c2:55:
8a:a1:3e:cc:18:fd:27:76:67:8c:06:27:4d:e6:2e:
6d:ec:3d:27:5b:df:0c:15:4d:f7:d0:c8:be:60:da:
3b:57:11:b3:9b:03:29:96:70:10:ab:d5:66:e2:69:
13:35:a7:db:e0:a1:2e:48:11:0b:34:5a:10:22:54:
f0:c4:0e:18:28:0f:57:01:1e:8a:ff:c9:86:68:4c:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:D0:5B:FB:A3:7C:87:2E:59:55:FC:51:B5:BA:34:95:FE:90:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4bf272c6-c10f-3880-8d83-849b4e0a3aae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.240.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b5:1b:7c:d0:b7:6e:a9:ac:8d:88:cf:b5:9c:f3:e7:47:d3:
2b:08:ce:3e:89:f5:0c:f3:2d:5a:22:46:8c:79:92:cd:c8:5c:
3f:ba:45:8b:5d:eb:f1:f2:fc:9c:41:4d:c4:8f:80:05:15:4a:
12:df:31:75:aa:df:94:bb:6e:aa:ea:c2:cf:73:1a:4b:44:3a:
a1:8f:8f:da:1b:38:da:5f:fe:90:c1:f8:9d:b0:8d:aa:6c:8a:
56:17:df:62:e3:19:33:97:3b:b7:c1:0f:66:42:4c:ca:ec:4f:
8e:23:13:cf:22:06:8d:10:31:40:78:49:40:27:e5:c3:bb:26:
2f:bc:f2:31:20:f9:97:e5:b6:55:e8:6e:e1:6d:73:44:4c:42:
a9:08:d0:b9:2e:67:84:fa:31:7a:13:a0:c2:97:98:65:d3:88:
7e:09:d7:d0:00:b4:66:1b:d4:49:5b:90:df:4a:1e:67:f4:ad:
28:bc:d0:e2:87:d7:9d:e0:9a:18:e0:ae:d2:96:b4:ed:46:81:
16:a2:36:2c:86:1c:8b:2a:7b:03:24:9c:11:26:2a:90:d8:88:
72:08:30:dd:1b:d4:98:21:c8:2a:2b:2f:db:26:a4:9c:6b:b8:
51:08:f4:28:cf:82:8a:a2:e2:88:22:a9:1b:ce:72:c9:73:1f:
f1:e7:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:57 2025 by rpki-client