Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67b6a122-fc85-3ae0-baac-5440fa1fbf9a.roa
File: 67b6a122-fc85-3ae0-baac-5440fa1fbf9a.roa (raw, json)
Hash identifier: kJ3hTHDnz7FenD4NnfTEIme8GmU9xt+Mxc3f+NgTBIE=
Subject key identifier: 89:45:BE:F6:60:2A:F1:9A:AA:7D:8B:66:3A:9B:0B:DE:B0:1B:98:BC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401BE045597509F77E4DBDE3C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67b6a122-fc85-3ae0-baac-5440fa1fbf9a.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 68.66.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:e0:45:59:75:09:f7:7e:4d:bd:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=ba793e4c-3e3a-41b6-a204-9a7828b97d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:2a:a4:8e:86:76:41:f3:d2:6b:33:f6:c9:
04:b2:50:4e:d8:b5:fd:fd:1d:ad:1f:a1:06:62:f0:
6e:ce:62:eb:8b:95:5f:77:99:29:11:fc:48:af:5a:
a0:34:89:58:f7:d1:c3:c0:ee:f9:88:5b:ed:60:d6:
af:41:13:d4:06:1c:1b:9f:3b:d8:80:76:e3:41:71:
1e:8c:0f:aa:9a:0f:d0:96:3f:e1:59:1e:f4:e0:48:
b6:69:8b:90:a6:a9:24:9e:e0:a0:c4:12:ee:8a:a8:
e4:07:50:2f:f8:9f:95:0c:51:d3:3c:2a:36:47:2f:
93:bb:4b:07:18:99:f7:79:6e:87:8c:8f:cf:5b:27:
a5:b9:2a:5c:9f:24:27:c1:1f:cf:46:3e:ca:22:c6:
c1:1f:9e:91:03:1d:1e:9f:ac:8e:81:68:70:25:53:
9d:8c:12:f8:b8:7a:20:ed:05:32:63:25:46:9c:27:
26:1a:21:46:a9:e6:73:5e:a9:55:ba:ab:50:90:2f:
56:3c:90:3d:43:63:a0:23:b2:86:72:66:ce:00:de:
4b:92:f7:fc:86:2f:7b:45:89:cd:11:58:12:de:2e:
a0:b9:8f:6f:b4:80:8e:8a:77:b0:4e:fd:78:6a:f2:
77:25:56:2d:5f:b1:11:15:70:57:86:28:5e:4e:1f:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:45:BE:F6:60:2A:F1:9A:AA:7D:8B:66:3A:9B:0B:DE:B0:1B:98:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67b6a122-fc85-3ae0-baac-5440fa1fbf9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:d9:e9:6a:0d:2d:19:40:06:5b:81:11:fe:79:46:8d:08:84:
1a:75:91:95:d9:65:03:ef:31:30:aa:fb:02:02:1a:bd:c3:86:
2e:8c:06:e8:50:59:b3:33:4c:ea:03:ad:6f:5d:d8:02:5c:8e:
d7:9c:05:51:05:98:64:f5:a4:9c:c8:09:df:06:b1:cc:26:78:
31:96:17:57:67:be:69:fd:d9:70:2e:23:43:66:ad:70:14:09:
26:74:b3:97:1a:e6:12:3e:e1:93:b0:b8:7d:7f:71:41:f8:01:
f8:06:aa:99:de:d2:b3:91:e9:ec:4c:02:71:6d:65:f5:04:9a:
9c:fa:2a:35:8d:71:af:6f:de:bd:6d:c6:d8:55:78:fa:f7:90:
ae:ec:6b:97:52:8f:43:5d:17:f7:66:a1:9b:71:ad:11:38:80:
39:dc:99:1c:fd:4a:2e:4e:93:bc:5c:82:10:66:3a:1c:f8:6a:
30:e5:92:2f:a9:45:0c:86:76:1c:96:2a:91:27:a3:3c:f9:1b:
58:65:15:79:a3:f8:09:14:69:1b:e5:33:c7:fd:f3:7b:37:2e:
5c:2d:14:7b:d2:d8:ae:e9:0f:1f:6b:ee:5e:d8:6f:7b:64:a7:
bf:4e:9f:60:95:76:36:5e:3a:6b:02:00:8b:02:0b:62:3d:17:
c8:74:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:59 2025 by rpki-client