Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5378ed32-8baf-3c58-a384-a11afc4e529a.roa
File: 5378ed32-8baf-3c58-a384-a11afc4e529a.roa (raw, json)
Hash identifier: +SH6x+ankt4eZzRjbVJ8MlsU55fODTP3bXX2UbXRWTo=
Subject key identifier: B6:86:16:70:4C:C5:BE:FB:5C:78:0D:A4:2C:89:A2:13:46:37:D2:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401E1609F4E9A405DDEA858800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5378ed32-8baf-3c58-a384-a11afc4e529a.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 65.8.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:16:09:f4:e9:a4:05:dd:ea:85:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=290fb00b-f11a-4329-bceb-e073b6cbe790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:1b:a0:cf:71:e7:0d:9d:33:04:77:b9:c9:
fd:5b:8e:85:1f:06:aa:64:35:9f:71:0f:af:3f:42:
53:03:90:39:7e:90:1f:1f:2c:55:19:fa:a8:30:be:
e9:0e:a2:7c:66:2a:b6:5c:26:90:4d:56:e7:f5:f8:
a5:76:6a:cf:55:52:d0:e5:f9:d6:72:a2:83:a8:a8:
88:e5:af:f9:1c:9b:62:33:7e:ab:b5:73:c0:9a:c4:
f0:38:cc:b5:3f:bb:20:01:db:fd:d6:3b:bf:21:63:
69:ef:6b:63:ba:8b:ec:29:fc:de:57:2a:df:98:df:
c9:f2:8d:ab:4a:33:14:f5:f3:ec:77:5a:63:af:85:
32:d7:16:4b:9a:eb:90:6c:9c:9a:1a:10:ea:9e:cf:
45:35:e9:48:91:fd:25:64:18:99:c3:32:c5:f6:cc:
c3:a8:93:3d:de:90:34:17:27:63:24:dd:19:36:f3:
fa:9b:7b:c2:9d:f3:df:9f:8a:f7:bb:f5:6e:32:0c:
fd:4b:cf:e3:70:9f:bb:87:d9:57:0a:ed:f7:f4:14:
3e:38:e0:d5:4f:d9:22:ee:1b:ba:1e:2a:95:94:b1:
d0:cc:71:4b:b4:4f:62:bc:4e:2d:c9:53:cd:14:a0:
fe:b2:4d:f3:9f:0c:95:eb:3f:2c:d1:7a:3f:70:9b:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:86:16:70:4C:C5:BE:FB:5C:78:0D:A4:2C:89:A2:13:46:37:D2:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5378ed32-8baf-3c58-a384-a11afc4e529a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.8.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:ec:d2:6d:2e:c4:f5:fd:cc:27:db:97:29:e3:c5:f9:b2:d3:
eb:33:a8:18:f4:11:0c:17:c3:62:18:00:97:3a:6a:4b:be:ee:
34:dc:21:98:56:0d:ea:30:d3:7f:4a:58:61:81:92:45:d7:dd:
cf:90:5a:0f:18:3d:e4:34:09:59:ba:ff:27:48:4e:a6:19:c7:
8c:56:a8:39:ee:df:49:67:b3:19:42:e3:bc:1c:bf:f1:0d:c9:
3c:13:d5:6e:55:98:92:1a:84:71:f4:8b:02:f5:1a:ba:10:8f:
77:45:25:47:13:b0:22:98:42:04:59:01:49:04:7d:fc:b4:7a:
28:4a:ac:3c:ad:4f:0b:67:8b:76:9f:68:e8:83:d0:dc:22:1f:
15:cb:84:bf:70:96:90:bb:e0:71:39:fb:b4:59:d6:10:a0:4f:
c1:86:9c:15:98:98:d3:94:c2:31:f3:ff:fc:10:4e:cc:a2:67:
c2:7f:6d:fc:ed:7d:78:37:76:9c:87:fc:fc:6d:12:2a:10:7b:
0b:d8:c1:de:e5:bc:3e:f8:3b:c1:1d:fd:d3:d8:51:50:99:61:
de:eb:bd:46:92:bf:ec:38:39:f9:5a:0b:c8:b6:1a:f6:c5:3c:
df:bc:49:be:48:2c:ef:2a:d1:eb:38:f0:9d:88:ea:40:b2:57:
fa:b7:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:56 2025 by rpki-client