Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b627b9a-f971-3b56-a212-9ee2975b8c18.roa
File: 6b627b9a-f971-3b56-a212-9ee2975b8c18.roa (raw, json)
Hash identifier: xQrmqd7jBXNtXxt9yDrCgk6gSJza/yt41e2qOYw66NY=
Subject key identifier: BE:CC:EC:F5:D8:A2:93:50:E0:B9:6E:0C:68:11:D4:CF:35:D1:C4:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A1F056322058F3F796E7D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b627b9a-f971-3b56-a212-9ee2975b8c18.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 76.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:1f:05:63:22:05:8f:3f:79:6e:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=b46836c0-8620-4218-8fd9-34087387fe6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:79:ac:87:30:78:0b:e0:f0:6c:39:56:a4:
df:17:9e:ba:bd:99:80:b9:ee:85:b0:ba:b8:0e:c9:
4e:9a:25:e7:24:02:00:0b:6e:c5:d1:a8:de:66:a5:
31:74:95:31:72:f1:87:ac:e4:34:b9:f2:3b:fe:b9:
f2:32:c8:7f:85:2e:27:49:02:2a:29:24:36:e5:49:
8e:e7:35:c9:69:db:83:f6:e6:a8:75:af:50:b6:88:
f1:75:b6:71:46:64:6f:3d:2f:26:e5:2e:d2:e6:38:
6f:43:ee:3e:c9:85:a1:de:be:e5:19:55:89:84:9f:
f4:fc:d4:3a:57:35:a5:94:f8:6f:1c:20:49:00:37:
aa:16:a5:89:c3:66:30:c0:15:b2:fa:43:b6:3b:68:
4a:87:59:d3:1e:0e:a2:b2:73:e1:6c:8c:37:94:6c:
d7:0b:b8:2b:ef:ad:48:43:6c:8b:d8:61:6d:e5:eb:
ac:22:87:27:82:d2:43:11:8c:3d:af:ce:74:e9:14:
e8:88:77:0d:08:cc:12:a0:46:a2:ad:41:f9:e8:31:
9b:01:a3:8d:be:6a:74:5b:42:39:2f:6b:34:af:2b:
19:75:f7:ee:a1:fd:d0:5d:6c:da:d7:54:9c:33:bd:
d8:98:38:58:c3:04:d6:0d:3b:01:80:fe:a1:51:d4:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:EC:F5:D8:A2:93:50:E0:B9:6E:0C:68:11:D4:CF:35:D1:C4:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b627b9a-f971-3b56-a212-9ee2975b8c18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:97:52:63:d8:d3:4a:fa:2f:9c:23:4b:d6:82:5a:e9:57:39:
cd:bd:31:69:b9:85:66:13:ee:15:44:20:59:a4:01:fa:8b:71:
4e:ca:66:5e:e8:1d:7e:d6:fb:6c:da:33:27:e7:7d:35:36:44:
ba:8b:a9:5e:19:62:e4:76:32:65:60:f9:70:b3:df:16:ab:de:
d5:a4:81:dc:04:85:f2:5f:fe:d2:d1:27:f9:fe:ce:13:27:bf:
47:1c:06:dc:09:e2:89:a5:7c:a5:77:1a:8b:94:3e:98:87:a0:
59:9d:75:a5:04:59:77:fc:f9:41:ac:71:e3:8a:66:e4:3f:3f:
6f:06:dc:3e:35:48:61:60:9f:39:4b:1b:e3:4f:a7:f0:61:cd:
d6:f3:cc:ac:d7:ac:cc:7b:c6:8c:61:35:1b:6f:98:e7:c5:cb:
15:e7:df:0b:eb:cf:cc:19:66:09:01:31:97:c0:1a:0d:1d:25:
9d:e9:4d:09:52:be:c0:7a:65:92:c9:8e:cd:f2:ef:e3:f9:c2:
be:a7:63:d6:94:ed:3d:7f:e5:54:81:e0:6e:7d:92:58:e9:61:
f7:ff:e3:a7:0c:5a:5d:50:69:81:74:c8:83:73:19:21:cd:16:
4d:2c:fc:3f:24:91:98:6c:f8:7b:bc:57:e0:f3:ee:eb:b5:91:
29:c1:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:28:00 2025 by rpki-client