Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67ecfaaa-0fc2-359f-9326-0dff6ca1defd.roa
File: 67ecfaaa-0fc2-359f-9326-0dff6ca1defd.roa (raw, json)
Hash identifier: z4WP010RLnZ9n33HEAyNW6d4T3NwEttDgLm/ulk8vpg=
Subject key identifier: BB:29:DF:75:EC:CF:18:40:EB:38:B3:71:D2:61:41:EA:93:D7:E8:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E93601D5148954F93D1A708C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67ecfaaa-0fc2-359f-9326-0dff6ca1defd.roa
Signing time: Thu 14 Jul 2022 21:12:08 +0000
ROA not before: Thu 14 Jul 2022 21:12:08 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 100.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:60:1d:51:48:95:4f:93:d1:a7:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 14 21:12:08 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=5401fe46-3c19-4e17-92b5-9196d4d1a1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:46:82:dc:3e:45:f1:32:9a:e2:27:94:8d:b6:
f7:20:a2:42:05:3c:a7:09:34:66:a2:2a:00:83:5a:
cd:41:8f:c6:c8:05:a9:f8:ee:7b:0f:9f:18:1b:73:
a4:af:5e:64:71:f2:98:40:6d:60:db:4b:6d:0c:c4:
bc:12:46:6d:1f:fa:e3:be:af:8b:f3:2f:fa:f6:23:
69:d1:e6:1c:45:e8:4d:ad:91:3a:ec:b2:2f:8b:5d:
13:cc:c2:55:11:9f:bd:45:9e:16:20:4b:fe:1e:46:
23:fb:43:2e:17:45:2b:79:87:09:41:4d:b7:53:2a:
a6:75:46:cd:8e:9b:6f:61:9f:da:c2:fa:c2:64:53:
ce:26:a1:07:7a:69:e1:d4:ee:5e:7b:da:79:45:5d:
b9:0b:1d:f8:e6:9f:47:bf:32:5d:13:cb:18:c3:60:
6e:ee:32:10:43:4f:89:45:96:55:99:9f:1b:0d:27:
7e:c9:5f:03:46:ef:a7:b7:f9:82:b4:61:40:e8:3a:
a0:6a:d1:ed:a5:f4:49:a7:e1:29:e0:81:d5:b3:f1:
ec:35:37:3d:5a:f6:62:76:89:b8:61:2c:98:8e:95:
d1:8a:03:fe:01:6c:3d:50:5a:30:3d:8f:4a:73:76:
7f:c7:2f:3c:85:c1:ac:56:ad:b5:80:7e:5a:70:6a:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:DF:75:EC:CF:18:40:EB:38:B3:71:D2:61:41:EA:93:D7:E8:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67ecfaaa-0fc2-359f-9326-0dff6ca1defd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:e7:25:d6:3f:2d:ca:02:82:db:71:e4:f1:15:e6:3c:b3:86:
cd:c2:3c:9b:61:d6:de:c4:1f:ca:cf:ff:9f:41:e6:59:e6:a6:
4e:c4:29:a7:bc:56:e9:21:bf:52:4a:f8:da:4a:c2:46:a5:74:
49:ca:77:86:7e:07:7f:70:2a:32:95:ac:8d:c1:b5:10:c1:ce:
19:03:5f:d4:a2:f6:a7:15:c8:03:27:86:0b:69:00:06:a9:7e:
88:19:36:4d:da:27:19:2a:18:15:56:4f:d7:35:01:e8:c3:17:
63:1c:04:b3:7e:94:cb:d1:53:a1:2a:cf:29:cf:db:7f:3e:57:
88:f0:75:d8:27:fa:b1:a2:70:39:44:f3:10:fd:58:45:82:8f:
38:77:2a:6c:91:55:38:bd:b8:7d:d5:92:06:c9:8a:8d:6f:8f:
ea:6e:9d:33:be:1e:0e:8e:fd:6c:dd:a4:a4:e7:23:82:41:25:
4b:f7:d2:7d:94:b0:ca:c1:55:05:30:f2:b7:1c:71:d7:ce:47:
13:ee:6b:06:94:eb:d4:a4:ef:e5:6c:42:d5:6f:d3:81:e5:56:
8b:c4:20:e3:1b:4d:77:a7:1c:14:93:f4:73:30:89:95:e0:55:
a8:a5:10:96:5e:41:be:e8:40:01:9b:39:c1:01:1d:e6:29:61:
50:54:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:52 2025 by rpki-client