Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65d96c41-c468-3dc3-96a5-8caa5e7207f9.roa
File: 65d96c41-c468-3dc3-96a5-8caa5e7207f9.roa (raw, json)
Hash identifier: p4VWI9a0OMCVS4RlHARnvx8jWugS3WkohHnViBcKXHA=
Subject key identifier: 9D:64:25:AE:D4:A2:5E:0F:19:3C:BF:18:94:22:FB:54:1C:C7:F7:A8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F77139E46A335C11A1245F100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65d96c41-c468-3dc3-96a5-8caa5e7207f9.roa
Signing time: Tue 04 Oct 2022 12:00:00 +0000
ROA not before: Tue 04 Oct 2022 12:00:00 +0000
ROA not after: Wed 09 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 76.223.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:77:13:9e:46:a3:35:c1:1a:12:45:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 4 12:00:00 2022 GMT
Not After : Nov 9 05:00:00 2022 GMT
Subject: CN=55a0aebe-2e79-4009-b01d-d48316543afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:65:69:4f:72:92:32:ec:73:b2:00:e4:ee:
d3:3b:b8:ab:13:00:1d:43:18:7f:42:eb:34:01:31:
82:31:73:74:e1:aa:73:25:4c:bf:00:94:99:ff:89:
42:37:f5:6a:29:62:5b:66:b6:1b:b5:3a:7d:b3:8c:
ce:a3:ed:06:33:07:ac:99:3d:88:37:69:b6:e3:0b:
62:0d:9f:cd:41:8c:87:d1:7d:2f:c7:a9:06:6a:e9:
66:e1:90:7e:e8:c9:a8:5e:bd:fa:0a:2a:a9:75:8f:
a9:14:83:f3:1c:a9:f9:d2:02:6a:fd:56:bb:37:42:
85:ff:ea:c4:5e:c8:ab:e6:9e:86:81:25:e1:78:eb:
1d:b4:77:7f:0f:60:6b:7c:41:5e:b8:b7:8b:fc:42:
ab:59:d4:93:6c:5b:ef:fe:28:d9:0d:2c:4d:34:9f:
8c:1f:ac:da:d0:71:27:85:88:c0:3c:e0:00:f9:6e:
52:4e:57:ee:72:88:9f:eb:4d:ff:8c:11:93:48:96:
ee:b4:c1:d7:eb:ad:88:cd:cc:ec:bb:c0:c6:a8:79:
3f:92:17:01:65:73:9b:1a:28:86:3c:9e:e4:d3:3d:
84:06:7f:de:b2:c0:13:9e:7a:97:fe:37:16:08:2b:
2f:dd:d7:3d:3e:23:00:47:43:f1:80:9d:11:8b:ac:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:25:AE:D4:A2:5E:0F:19:3C:BF:18:94:22:FB:54:1C:C7:F7:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65d96c41-c468-3dc3-96a5-8caa5e7207f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:15:a3:65:a5:22:bb:f1:9f:3b:c3:c0:19:3a:c7:41:ff:d2:
2e:c5:d7:fe:97:18:a9:f7:dd:9d:06:ad:24:2c:8f:70:31:72:
0f:c3:be:29:09:7e:bd:a5:2b:4c:65:73:ac:7c:bb:c4:f9:af:
56:f8:2c:53:b7:02:c5:6e:87:07:f8:06:94:85:6d:f2:fc:94:
91:3f:c5:58:2b:92:d4:8d:71:05:90:ee:27:78:e5:0b:3f:5d:
d1:0c:69:04:b8:7d:7b:b2:21:f7:09:e6:38:fa:1a:be:5a:82:
dd:5c:99:a2:e2:51:00:6a:d5:46:cd:97:4b:1e:1a:0e:51:af:
b3:dd:a7:23:d2:2b:db:1c:66:44:f8:93:5f:01:bc:77:fa:fa:
6d:56:57:98:3b:95:fc:c8:8b:06:a6:d6:b2:40:eb:a1:81:b3:
ae:2e:c3:93:a8:cf:c4:ea:9d:91:d9:0f:d5:c9:76:76:3d:5e:
81:b0:a0:03:5f:c1:bb:06:01:9f:75:19:66:98:d6:23:e8:92:
33:ec:6d:c7:46:9e:b0:3c:68:af:9b:20:7b:b3:98:b6:62:52:
ec:d9:ef:9b:d4:11:b5:2c:e5:90:40:ac:96:4e:db:b1:b2:8c:
95:ca:c9:24:4b:dd:f5:20:95:0b:36:b0:b3:17:b1:25:97:5b:
e2:20:72:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:32 2025 by rpki-client