Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d5987cd-6080-3c2a-aa23-785d7dac98a1.roa
File: 6d5987cd-6080-3c2a-aa23-785d7dac98a1.roa (raw, json)
Hash identifier: v7DVrRApIWbMJzyzEA54ADw18AG3cqK4muShCwu3Eqw=
Subject key identifier: 0A:7B:7B:D7:73:04:D5:00:D6:DB:A0:DD:CE:34:C1:42:F7:E2:14:41
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBA0D819DE5AAA5F60B2AC5C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d5987cd-6080-3c2a-aa23-785d7dac98a1.roa
Signing time: Thu 28 Jul 2022 12:00:00 +0000
ROA not before: Thu 28 Jul 2022 12:00:00 +0000
ROA not after: Fri 02 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ba:0d:81:9d:e5:aa:a5:f6:0b:2a:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 28 12:00:00 2022 GMT
Not After : Sep 2 04:00:00 2022 GMT
Subject: CN=76a89b04-69e7-47a7-a9a3-d993f9abd07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:5a:59:99:42:08:7f:06:42:a9:1f:92:e4:
f8:dd:95:00:aa:e2:ce:ad:de:72:fd:69:a8:4c:57:
dc:67:ef:47:a5:d5:a9:b6:b8:dc:4f:84:cb:44:ca:
79:82:b3:42:6b:25:44:95:ca:94:99:84:12:03:ef:
db:11:c4:10:b6:ef:89:27:57:da:3e:64:09:83:31:
86:3c:6d:41:ef:8b:86:b6:57:05:21:fc:05:04:a6:
f9:90:d6:07:d0:bf:51:b3:43:af:4f:d5:ad:95:d3:
ee:ca:96:1d:96:4d:8b:25:a1:b7:a8:e4:b3:f7:6b:
a8:da:af:57:c6:39:6d:19:2c:c9:5c:42:74:73:60:
95:aa:9e:c3:9b:dc:75:b5:db:ee:04:2c:69:44:98:
f0:f6:4d:1b:75:f5:7e:41:7d:be:b6:9b:6e:43:1d:
f1:b7:04:00:cf:54:fc:a7:02:14:41:10:7b:78:5c:
e2:7a:51:48:75:07:89:23:d4:e3:93:da:bc:79:45:
81:00:04:44:bc:79:16:e4:a0:28:aa:d3:8c:a4:2e:
4f:12:35:3c:57:cc:82:f9:bd:d2:ee:86:de:f4:3b:
90:b9:33:50:ad:cc:f5:66:d0:96:7b:96:f8:e3:21:
a6:1d:a0:e8:dd:54:62:54:8e:00:f5:2b:dc:8a:13:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:7B:D7:73:04:D5:00:D6:DB:A0:DD:CE:34:C1:42:F7:E2:14:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6d5987cd-6080-3c2a-aa23-785d7dac98a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:09:30:0b:c7:92:fd:18:11:ae:e6:72:23:a5:e8:f5:1e:27:
12:2b:61:fa:7e:a6:40:e0:e4:6d:04:48:75:7a:43:09:67:ae:
32:bf:7d:2d:43:df:e7:59:36:66:c5:50:95:94:e9:5c:82:9e:
df:ca:b9:de:2f:f4:80:50:6b:46:b5:9b:75:a1:9f:e3:00:33:
51:78:8b:60:7e:d5:ec:8c:5c:0d:3e:b3:c6:0e:84:7a:43:cd:
a3:53:f4:1b:3b:8a:da:4e:68:c5:42:a1:ca:f3:48:ef:54:a9:
25:8a:ab:70:3e:f6:2c:77:45:7e:19:52:e3:e1:4b:43:c6:b0:
08:fc:ad:19:8b:5d:88:c9:2c:0c:2d:c4:5e:c6:e6:84:75:e2:
82:2c:f7:44:99:c5:47:84:c1:89:24:4f:e1:06:8a:6f:74:ba:
13:22:e7:c4:a3:a5:57:94:1b:05:6e:16:6b:f1:15:5f:76:c2:
5a:d9:62:a7:ae:b9:bd:f4:69:6c:84:68:00:95:06:c5:2a:02:
26:eb:b5:18:73:ff:5b:2b:a9:2d:a0:b1:49:af:8e:df:f1:a0:
4e:c5:64:14:46:bc:24:c2:4d:89:f0:b3:2c:f6:bd:06:e1:bb:
0e:2b:81:ac:27:53:c5:54:ee:a0:34:55:c2:d8:4a:27:4b:c0:
39:48:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:17:12 2025 by rpki-client