Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71846f67-405d-396e-8ac9-f471355a392f.roa
File: 71846f67-405d-396e-8ac9-f471355a392f.roa (raw, json)
Hash identifier: WtAdu7wQwlSCwyUD+cRLpDl9y0drbSY3nlyCdc1VHzM=
Subject key identifier: EA:3F:30:18:74:82:C8:EB:14:68:8B:83:D9:7B:25:26:2C:AA:A2:5E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF94E4DBAACCAA01483749080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71846f67-405d-396e-8ac9-f471355a392f.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:4e:4d:ba:ac:ca:a0:14:83:74:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=2a43f92c-f7ad-4afb-a750-7ef1bb0345a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:3c:96:7a:32:f9:57:64:1c:58:45:fc:f5:
1d:c0:41:c3:30:98:20:b5:bd:58:be:ab:d2:98:61:
15:69:f2:54:90:ab:31:7f:47:ff:7b:cc:53:c8:40:
9c:2d:af:47:2f:56:70:91:b1:35:84:a8:f2:3b:3f:
e9:78:ce:40:bd:b6:da:ab:96:45:68:ff:d7:20:d8:
7e:c6:de:dd:87:5b:b0:67:11:4f:64:51:81:3c:51:
77:83:d5:e1:8d:c2:24:7b:b7:68:83:f9:5d:76:0a:
b1:cd:52:5b:72:4a:ab:00:6e:98:23:f3:10:d4:dc:
e7:b8:10:97:1b:27:d8:fb:4a:74:84:7d:41:3a:25:
9c:f8:ac:d4:2a:a3:04:e5:09:d7:55:6b:d4:cc:69:
24:c0:b8:3c:10:94:2a:c1:35:5c:d7:5a:f5:10:a3:
32:e1:59:1a:28:79:df:4a:f3:de:7e:ad:75:1b:3b:
87:d6:5a:00:d5:0a:a6:32:07:e8:f7:81:15:a6:b0:
1c:f1:73:47:ca:65:dc:fc:09:5d:e4:8a:bf:ae:a3:
f3:9e:20:33:88:42:4e:8d:07:04:be:45:95:51:23:
93:2a:fe:e9:67:58:68:89:8b:30:63:50:dc:1a:ae:
1a:a2:77:06:90:3d:85:d8:58:28:82:4f:e4:49:17:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3F:30:18:74:82:C8:EB:14:68:8B:83:D9:7B:25:26:2C:AA:A2:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71846f67-405d-396e-8ac9-f471355a392f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:b6:d8:41:81:87:68:8a:ad:21:1f:43:b3:44:66:10:31:0c:
d9:da:d3:ae:2c:5b:96:25:ca:d1:3a:06:02:af:e5:7d:6b:15:
95:16:97:d9:0c:ea:33:7f:2f:fb:ed:87:7b:49:f0:13:4a:b3:
cf:d7:49:eb:a4:5a:44:26:f0:04:bf:a2:bb:f6:3e:c3:0a:cb:
50:1c:83:ae:30:4c:14:49:8e:44:95:ff:4b:1e:c2:63:47:a5:
0f:04:f1:ef:cd:9d:4b:37:e7:36:49:14:f7:ec:e0:c8:7e:70:
ab:98:c7:bf:7c:04:36:9c:01:d6:3a:17:00:09:10:21:ea:23:
90:b6:ab:88:a0:dc:7c:88:d4:01:da:24:d0:6f:3c:0e:42:8f:
57:b9:ac:2b:e5:b2:37:58:f7:d2:98:e8:fc:ca:f3:86:62:c7:
5c:de:c4:79:98:27:5f:88:b6:3e:62:3b:75:ea:50:d8:9a:52:
1b:b6:33:a7:f7:77:ba:f1:89:06:47:f2:84:72:b8:4c:52:b3:
0d:75:48:65:4f:82:b7:7c:ce:01:14:1e:5d:97:0d:95:fb:23:
75:e3:03:b5:38:7b:fc:61:d4:cc:54:d2:4c:72:58:b5:7c:f6:
8f:0d:a0:41:21:b3:c1:93:97:8d:44:c5:f5:53:d8:6f:dc:75:
24:20:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:55 2025 by rpki-client