Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5021cf0b-472b-3716-84b9-5e608b935c38.roa
File: 5021cf0b-472b-3716-84b9-5e608b935c38.roa (raw, json)
Hash identifier: 5XyjYjurGsM91oqlJ16bTEk1pmH0HZBTZLDtof2QYjs=
Subject key identifier: B8:94:81:FE:18:58:5D:B5:FC:FD:BC:D7:36:6C:46:23:B6:A9:6D:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840434EF98824CD2255919D0280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5021cf0b-472b-3716-84b9-5e608b935c38.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 72.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:4e:f9:88:24:cd:22:55:91:9d:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=92a0f3db-a299-45cc-bbe2-7fd0686ebffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:65:93:24:b7:ac:01:e2:d6:7f:0f:13:54:
9b:6b:e4:8c:87:7c:10:8b:91:86:16:67:ce:6d:22:
ef:66:84:5f:fb:ee:c9:52:07:a0:85:32:71:06:9e:
a3:ea:65:c6:0d:08:74:27:ea:f1:76:8f:40:e0:db:
be:17:49:83:82:c1:70:00:53:0b:f2:dd:a3:e9:80:
42:b3:1c:22:d6:86:48:a6:d0:72:2d:d1:03:dd:bd:
96:b2:6f:53:89:92:9c:d1:45:07:c2:64:9d:6a:10:
3b:85:8c:6f:c6:39:58:3a:58:85:73:f8:b9:95:ea:
ee:cc:92:25:96:e4:68:43:ba:d1:83:d9:66:cb:b6:
07:bf:6e:a0:28:36:60:5d:c8:88:2e:7a:90:1e:67:
9b:99:03:16:cb:fd:6c:10:e9:14:ef:80:46:4f:c6:
7d:be:6f:0d:34:b0:ef:79:f2:5f:85:b3:d7:95:70:
af:2a:62:2f:44:f2:7d:cf:3a:01:87:4d:63:51:bb:
dc:70:6f:39:c9:2d:9c:c9:fd:0d:e6:b4:d6:e5:fe:
3b:0b:65:cd:53:e9:0b:2d:76:8f:19:8b:aa:fc:d7:
9e:cf:18:f0:07:3f:7a:55:5a:94:9b:65:56:74:6d:
35:25:44:02:1d:a9:9b:fb:61:ed:a1:30:29:f5:a5:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:81:FE:18:58:5D:B5:FC:FD:BC:D7:36:6C:46:23:B6:A9:6D:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5021cf0b-472b-3716-84b9-5e608b935c38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:bf:72:bf:f2:3a:fa:50:c6:ba:57:44:1b:d3:d8:ff:3b:ef:
3e:5d:38:c6:48:5f:18:c1:a9:52:bd:8f:a8:03:b1:c1:2d:b3:
db:28:69:8f:08:ea:0e:32:6e:89:4a:f8:69:1b:38:9a:99:22:
da:3b:37:9c:40:fe:cb:1b:a1:a6:71:b5:05:90:d5:54:63:89:
d4:62:97:0f:ac:72:b0:0b:64:9b:80:28:99:69:6d:c2:2e:6b:
f4:1e:2a:63:2a:56:70:92:75:bf:cb:36:0a:48:9d:1a:f9:b3:
54:00:5b:ae:ae:01:02:e0:31:8c:61:ad:60:7a:c3:36:67:01:
74:84:79:1d:d9:be:4f:95:4f:25:96:50:c5:38:16:ad:f0:c5:
a5:3c:64:ee:fe:6a:8a:eb:03:ca:e6:f1:64:db:18:77:a7:31:
17:eb:04:b6:d4:69:ad:fa:11:0c:89:a8:09:d5:b5:c0:0e:c8:
6f:27:71:21:41:bd:67:65:53:a3:b7:15:75:a6:f4:2a:a0:2c:
13:7b:b6:09:e6:eb:66:64:6c:50:10:e2:d1:3f:79:35:60:b6:
4a:eb:1d:a3:69:83:58:68:87:fa:fa:7c:4f:37:ac:53:e2:9c:
82:67:0f:ea:1d:0f:42:01:d1:a2:3d:cb:b6:e4:0d:2c:e2:cb:
48:ce:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:34 2025 by rpki-client