Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568810ce-61e0-3ddd-a700-d8eb78d442d8.roa
File: 568810ce-61e0-3ddd-a700-d8eb78d442d8.roa (raw, json)
Hash identifier: lsBQ45fgVb6MrJkPZMjXwMbkFsVE6NBh5qm1VoQe6Bk=
Subject key identifier: 30:7A:D1:42:90:6B:11:33:77:34:A0:6A:6A:D8:72:21:90:9F:F7:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A1EA5F220F31B0CB6DF7200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568810ce-61e0-3ddd-a700-d8eb78d442d8.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 76.238.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:1e:a5:f2:20:f3:1b:0c:b6:df:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=73e39174-816c-49c1-8439-85d2db40adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:04:69:76:9c:4c:2b:b4:94:7e:42:58:75:
16:4e:bd:3d:7f:bc:8d:bd:7e:ca:1e:14:bc:16:15:
b2:9e:d9:6d:a4:48:aa:2d:73:56:46:b9:7a:58:77:
e1:35:53:e4:27:fb:64:a5:3f:7f:45:a7:52:28:59:
88:77:06:d8:f7:d5:25:45:aa:a1:4f:fb:ae:93:b5:
dd:b3:7f:c7:50:06:ba:3f:a7:67:30:bd:45:3d:35:
46:17:02:30:99:e2:9e:9b:f6:66:44:4d:16:00:34:
34:80:2b:2d:e2:de:d7:03:61:0f:fa:75:5d:92:c7:
54:a6:9b:df:03:fc:36:cd:d6:67:5d:a5:a8:64:d6:
b9:19:48:e9:b7:ad:45:1a:e8:f2:ee:80:68:90:66:
54:93:66:70:e9:67:c5:b7:83:fa:ec:03:01:9a:38:
49:36:d8:11:27:50:d9:b3:c7:2e:13:5e:a4:14:1b:
10:c2:36:f9:94:24:c6:c5:36:23:a6:ec:63:20:7d:
aa:69:d6:d3:7d:34:08:ef:4e:2a:c7:3a:2e:e2:71:
7c:5c:78:6a:1f:f0:e2:69:56:fb:d0:ab:b7:4d:cb:
34:e5:ef:a1:67:ff:37:03:20:85:ea:be:d0:c6:ae:
23:d3:53:7f:b0:56:e3:8d:4e:02:cf:c1:5a:2c:38:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7A:D1:42:90:6B:11:33:77:34:A0:6A:6A:D8:72:21:90:9F:F7:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568810ce-61e0-3ddd-a700-d8eb78d442d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.238.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:cc:d7:d6:1c:b7:fe:2d:79:e7:a4:67:1a:a8:b9:33:07:54:
b9:fe:7b:56:4c:1a:76:a7:2d:10:1c:b4:d6:37:07:1d:f0:9e:
25:ad:95:62:1b:20:c4:86:89:2c:ef:ce:6e:c7:a7:89:59:a2:
f0:51:a5:a4:4f:6c:99:04:bf:ea:e1:08:5a:be:6a:95:43:44:
43:b0:99:5f:9f:63:96:31:f0:4b:be:06:26:24:5b:5b:ec:b2:
b8:2b:5c:ef:9f:00:3a:97:db:fa:f0:a8:b6:68:fe:c5:ae:2e:
78:6f:80:4c:bc:7e:ef:1e:2a:64:22:30:a8:5f:5f:3e:e7:96:
53:94:0f:38:76:f4:4e:8b:2b:f8:a0:01:23:4f:cb:a7:fa:46:
a3:27:7d:d8:ef:2d:c9:9c:54:3a:b8:db:a5:49:f5:07:f5:d9:
82:4d:4a:58:82:f4:ac:4d:40:d5:fe:f3:3b:52:16:40:22:80:
dc:9c:47:55:6b:ff:a5:ba:b7:b2:01:7f:3d:cc:88:28:4d:2a:
fe:c3:85:fb:81:8e:ba:42:2b:09:d7:f3:3a:84:e4:a9:be:a7:
f5:0f:a0:9b:fa:7e:55:a3:bc:85:f0:d4:16:49:7f:93:d9:75:
dd:9d:c3:8a:f1:8e:75:ab:c1:9f:66:5e:65:6b:0d:38:0b:dd:
d1:d4:10:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:02 2025 by rpki-client