Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61b42e5a-9d1a-3659-a85f-bab1d291a39c.roa
File: 61b42e5a-9d1a-3659-a85f-bab1d291a39c.roa (raw, json)
Hash identifier: LxyjzjNKuG2SIbjQFcufCgaZCkggPM5ezFJP6XkMBWA=
Subject key identifier: F5:A7:10:E4:86:CA:3C:20:D3:DB:3C:D7:03:B1:06:9B:55:35:33:93
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A0B3E2D5949B8471541CD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61b42e5a-9d1a-3659-a85f-bab1d291a39c.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 76.205.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:0b:3e:2d:59:49:b8:47:15:41:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=f96b8e9a-582c-4010-86a1-48b3bdb951ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:92:8f:99:89:39:2b:0a:02:5c:55:f2:11:0a:
35:ca:33:40:99:83:a5:73:ab:80:cd:b4:00:37:01:
26:34:22:7b:03:d4:c7:1d:e1:20:9d:c2:93:9b:33:
40:8b:96:81:fc:d9:36:d4:d6:6a:46:83:0a:30:35:
9d:af:b4:da:4d:9b:ff:2b:96:c6:e6:e7:34:ef:b8:
43:dd:71:8c:2b:45:2e:79:a4:97:83:75:40:59:0f:
56:e8:d2:c0:aa:7b:3b:11:d8:0c:5d:59:02:21:d1:
d1:37:89:00:f5:bd:e2:3c:48:8a:2a:b6:ea:dd:ca:
e5:99:58:31:1b:63:fe:20:d0:e0:62:8b:5d:b4:3c:
24:68:48:bb:23:34:2a:cb:4e:51:6b:4e:46:05:46:
1b:32:c2:a2:7c:ff:0f:f5:fd:e4:c5:75:ab:f9:40:
0f:dd:b6:85:ef:47:3c:5c:3f:4a:34:25:58:73:f0:
aa:65:9b:9e:9a:a1:2b:4d:5c:b4:85:f9:3a:6c:cc:
e6:78:78:d8:a8:06:31:84:35:81:37:fc:5b:fc:7e:
e0:d3:56:0a:79:7a:a5:0f:86:f7:1a:13:80:13:aa:
29:2e:4d:38:1d:53:94:d8:61:a1:83:3b:18:e3:1d:
a4:2c:c9:03:ca:80:5c:6c:aa:9c:1a:d9:b2:24:2c:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:10:E4:86:CA:3C:20:D3:DB:3C:D7:03:B1:06:9B:55:35:33:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61b42e5a-9d1a-3659-a85f-bab1d291a39c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.205.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:54:ff:47:76:7b:be:bc:f9:f9:2a:78:57:ea:d2:2c:b6:0a:
66:17:52:ed:48:c5:81:67:d0:4e:1b:e7:3a:52:17:80:8f:e2:
5c:b1:c6:53:b7:d5:f2:9b:cd:0e:f7:9f:4e:7e:7c:6b:ab:30:
c6:6a:98:1c:0a:4a:71:9e:e6:76:23:f4:64:e9:3e:26:2b:81:
ac:78:d2:0a:a3:41:69:e5:3d:e5:9f:f5:3d:bc:69:e7:cf:cc:
0c:2d:4a:6c:ed:71:0c:d7:e0:51:9d:aa:48:6e:47:0b:f7:00:
5a:c4:05:d0:7f:11:d5:40:cf:36:d9:d8:e9:02:e3:f7:69:d6:
b5:fd:9b:4d:48:85:aa:2e:d8:d3:50:d3:45:89:0b:66:25:bc:
e3:02:63:30:ae:7b:1d:39:04:de:09:67:1a:7f:87:85:a2:c3:
0a:9f:6c:4f:6a:f9:9c:25:5a:f7:aa:f8:2a:d9:36:c0:df:60:
4f:db:47:b3:66:1a:9b:35:da:33:d1:10:af:12:88:45:fc:62:
44:01:e6:09:ac:60:89:4d:f0:17:58:1a:66:3f:1b:45:f1:2c:
39:33:02:b5:6a:5c:e8:34:49:95:1c:69:f2:4d:8b:cf:86:4c:
18:8d:79:db:f4:e5:2a:b3:09:2d:f1:13:8b:30:bb:6f:f0:f0:
b3:02:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:25:44 2025 by rpki-client