Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d57e086-772e-3170-bd35-b6be4b015bfd.roa
File: 4d57e086-772e-3170-bd35-b6be4b015bfd.roa (raw, json)
Hash identifier: VBEpw5GIYDmRxUkwC4Go6wMj58Ec2oLMKSsQJcMpj48=
Subject key identifier: FA:1D:B9:B3:CF:CC:15:8E:07:12:BD:F5:2F:3A:C9:89:65:CD:FB:EA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F591F6C60DC719B8D421D3880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d57e086-772e-3170-bd35-b6be4b015bfd.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 67.202.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:1f:6c:60:dc:71:9b:8d:42:1d:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=3aca9271-8639-4b6c-b5b6-4cf9289351e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:15:50:a3:4e:69:a9:cd:3e:46:45:67:48:
7f:dd:52:83:5c:5e:26:f3:07:22:8f:b4:6c:06:f3:
81:4b:f1:05:0b:28:27:5b:53:ed:fc:cb:dc:db:2d:
7b:f2:a9:d2:0e:4a:c6:c0:ab:8c:7a:e5:e9:5c:9e:
c9:d4:a1:6f:b8:24:eb:b2:f7:59:ca:c7:14:1b:a9:
27:f1:73:71:7c:71:e9:a8:37:30:e5:d9:50:12:dc:
9b:55:f5:86:ad:09:fc:db:a1:cd:00:20:eb:a4:92:
b3:53:f9:c8:aa:2d:64:31:64:a1:a5:d9:f2:92:52:
56:fd:99:07:e1:7a:62:b1:bf:e3:1d:05:97:3b:d8:
6f:c4:fe:82:c5:63:d3:55:dd:da:e2:6c:4d:66:3e:
02:eb:5a:b6:d6:a6:b1:e1:68:54:5e:b0:5f:c6:f9:
20:80:23:e1:a8:a8:5d:53:da:17:ab:b8:c6:6e:83:
23:39:09:ca:1e:3d:88:18:be:db:4e:a0:0c:4f:af:
52:20:c1:b7:3f:fc:ac:df:c0:9a:64:04:7c:7d:99:
2f:4d:94:ba:d4:38:15:6d:24:ee:48:6b:ae:df:10:
ca:b4:f6:32:66:27:cf:a7:66:94:56:0e:9c:72:24:
6f:93:f9:68:87:6f:9d:20:29:79:76:22:89:0b:9a:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:B9:B3:CF:CC:15:8E:07:12:BD:F5:2F:3A:C9:89:65:CD:FB:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d57e086-772e-3170-bd35-b6be4b015bfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
67.202.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e3:8a:fe:79:92:4a:c6:f9:ad:c0:1f:17:38:a0:c3:82:1d:
68:7e:83:e7:ed:32:09:9b:bd:51:de:09:b1:2f:8b:be:0b:12:
71:ef:c2:4f:59:35:ae:03:46:b3:9a:92:ce:d0:f8:03:37:eb:
40:43:d3:42:4c:7f:11:89:0b:95:7a:41:e8:d9:dd:6e:52:36:
a1:a4:6e:3d:5b:4a:95:82:46:e5:ed:4e:95:07:91:73:ed:a0:
80:5f:74:d6:ea:06:ef:3d:51:56:9a:18:bf:d3:ff:54:1c:2e:
3a:b6:51:8f:89:6e:61:9f:4b:4c:cc:bb:d8:58:00:03:b3:f9:
a3:09:bf:31:3f:65:33:55:0b:b5:2e:63:3f:6b:cd:b2:e7:8e:
e0:e4:4e:59:a0:73:44:0c:7c:34:37:f4:c0:d4:68:17:e2:88:
c0:88:c1:48:38:ab:9b:28:00:32:d4:3d:77:39:e0:bd:98:10:
a8:a1:6c:82:80:e3:66:53:00:c8:be:67:56:d4:04:c4:bb:10:
f4:d4:30:34:84:3f:8d:73:8e:11:cd:9e:9d:72:a4:46:e0:89:
23:1a:1e:9b:57:a3:96:04:eb:99:6d:14:66:a3:0e:b1:31:33:
83:3e:bb:55:84:45:67:f0:a7:20:b5:4b:16:67:07:da:3f:d7:
1d:f0:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:22 2025 by rpki-client