Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63e68a5a-0ce3-3009-927c-aba0f63db39f.roa
File: 63e68a5a-0ce3-3009-927c-aba0f63db39f.roa (raw, json)
Hash identifier: oxjNdV0lgEdhy+Xb2V0VMxNxoxCnj01+oOsCMurLDqI=
Subject key identifier: DC:32:72:80:26:1B:15:F7:CF:9B:21:27:6A:2F:29:A7:A7:07:AF:47
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E204DB70387F558E838739D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63e68a5a-0ce3-3009-927c-aba0f63db39f.roa
Signing time: Fri 03 Jun 2022 20:03:08 +0000
ROA not before: Fri 03 Jun 2022 20:03:08 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 75.2.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:4d:b7:03:87:f5:58:e8:38:73:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 3 20:03:08 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=b1badffa-de69-4cbf-ae57-88dcbdc34a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:0b:d8:f7:9d:5d:6c:9a:88:60:bd:e2:9b:
71:65:29:46:db:4a:99:74:7d:72:8c:7c:5f:4a:2c:
94:53:f6:5a:b9:23:df:3e:43:14:69:f4:a4:95:28:
47:8b:6c:15:cc:03:aa:a6:4d:17:45:2f:ae:60:72:
83:2c:6e:65:77:e0:8c:2d:44:19:ef:17:21:c3:48:
ec:2c:60:ea:f6:99:24:d4:72:89:3d:13:10:90:57:
95:0d:01:50:18:db:b0:ea:41:a8:d8:d8:21:0c:35:
70:f8:dc:33:de:a6:8c:84:9b:2d:6e:5b:e3:71:c6:
d0:37:db:c1:bb:86:05:23:18:e8:0e:77:eb:34:60:
ff:06:e5:c0:15:fc:2c:38:bc:a7:1d:9a:d3:4c:35:
ab:ef:18:72:33:47:33:ba:22:31:d1:f7:9b:de:a2:
cc:d6:bf:6f:80:aa:14:55:51:db:ed:94:29:eb:ba:
63:e9:f2:94:9d:b9:be:11:31:e3:cb:36:35:4d:51:
eb:32:dc:62:62:8e:48:47:28:2b:f2:95:4b:43:fc:
67:b1:f2:75:b2:49:46:1e:aa:82:8e:16:09:da:f3:
00:f0:bc:b5:13:9d:76:f2:a9:07:ed:95:48:ee:9a:
98:16:2d:44:16:e0:9a:11:44:ab:80:e3:47:8d:04:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:32:72:80:26:1B:15:F7:CF:9B:21:27:6A:2F:29:A7:A7:07:AF:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63e68a5a-0ce3-3009-927c-aba0f63db39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.2.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:59:22:31:e3:d8:ff:9d:85:d9:a0:e2:52:2a:f2:e9:9a:8a:
b7:5f:65:85:31:aa:5d:0d:ce:99:d9:52:71:c7:f0:8b:08:4b:
ab:d3:6c:a4:c1:69:5c:39:df:d9:07:da:9f:a8:1a:c8:50:ce:
45:11:97:2a:4d:2b:18:60:b8:85:41:b5:68:58:17:11:c3:0c:
fd:bb:97:6e:a3:f9:93:be:eb:93:75:d9:4e:f6:cf:fb:50:1d:
12:29:5b:95:a7:7e:a5:07:31:d5:44:d0:03:86:37:e2:30:bb:
5b:c1:0c:6a:b1:18:ee:03:bb:3c:28:5a:09:94:99:6c:00:2e:
26:ad:f1:52:32:6d:9b:d7:f4:15:f2:37:0a:c6:d0:f8:c1:b9:
77:2c:d5:4b:22:43:65:76:b8:91:a0:f0:c2:9d:7b:aa:49:50:
05:28:ee:ea:14:5d:4d:06:1e:6a:55:83:78:36:27:2f:81:16:
9c:e4:60:f5:76:fe:c1:50:ea:7f:30:f4:9f:8d:5d:0c:0b:14:
f6:5d:2a:f1:b8:72:92:cc:b7:7d:05:69:22:8b:4b:c9:c8:64:
7f:78:65:8a:00:a1:fb:92:73:56:41:4c:83:ff:0b:b1:e5:d6:
38:f7:07:03:16:fb:e4:c6:3f:54:e8:9e:d5:e1:d4:12:d3:55:
16:04:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:40:33 2025 by rpki-client