Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7372b2d7-23f2-3601-b8fd-8532f38b3fab.roa
File: 7372b2d7-23f2-3601-b8fd-8532f38b3fab.roa (raw, json)
Hash identifier: 4dcu7kxB8N6jGH49vGrab+1zi7+UwDMkA1tGf/2IIRA=
Subject key identifier: F2:77:09:3B:6E:72:93:B7:B1:5B:00:18:80:8E:5F:DB:BA:A8:29:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408FB43A3F086272C5E0EE2600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7372b2d7-23f2-3601-b8fd-8532f38b3fab.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 76.211.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:b4:3a:3f:08:62:72:c5:e0:ee:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=3d5ae455-01ba-4203-9659-e1c35a6c2eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:55:d3:99:ae:5d:17:f9:22:55:0c:fb:3e:
5e:9c:89:b5:19:1e:0f:d1:a1:5a:b7:c3:ae:9f:d1:
b4:e1:f7:2c:0e:78:d0:1e:2c:08:d3:d4:f6:bb:c8:
3a:de:aa:dc:d6:5f:f3:5f:88:2b:f4:67:0d:09:7d:
b7:e8:1d:0b:9b:45:13:68:f3:79:34:76:a7:61:21:
57:83:53:02:81:8c:d5:dd:c4:cf:b9:9a:38:5e:4a:
ea:30:60:12:7d:0c:01:57:f4:4b:06:c8:67:62:c5:
e0:fa:65:c7:e9:98:53:ae:21:cf:2c:e8:7b:cc:9c:
41:36:7a:eb:4f:b9:10:ea:28:dd:8b:bd:f5:86:47:
89:01:c8:c4:32:16:ae:dc:33:ff:95:8f:f4:13:7a:
8a:20:82:ee:68:13:80:61:db:77:7d:92:4d:61:7f:
df:39:54:5b:ba:bd:ab:0f:bb:7c:a9:27:50:7f:fd:
3c:d7:5b:86:c9:f0:a7:88:99:b5:6f:db:18:78:d7:
d4:f6:66:21:db:8a:d0:51:b0:b0:b8:90:32:77:70:
c7:f3:0f:a6:04:12:73:88:12:e7:ec:47:76:75:4d:
0d:ec:4d:87:b9:ca:16:ae:2f:29:4a:ee:e5:a4:2d:
a0:b5:9f:f1:32:1d:8d:60:0c:2b:68:27:8c:07:53:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:09:3B:6E:72:93:B7:B1:5B:00:18:80:8E:5F:DB:BA:A8:29:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7372b2d7-23f2-3601-b8fd-8532f38b3fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.211.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:eb:8a:9d:67:cc:c7:96:3b:c1:b3:89:f2:1c:02:7f:94:9e:
45:e6:ca:2f:b1:e1:bd:7b:2c:e4:22:c5:2a:df:62:e3:2a:2c:
b2:f0:71:15:c6:6d:5c:b2:3f:84:cc:7d:aa:5e:d4:e0:df:f5:
15:66:a7:45:34:03:74:6a:07:a7:44:31:d9:cc:d4:8c:36:76:
90:70:2d:82:68:5e:5d:df:4e:84:6d:c7:f6:50:06:98:6b:7a:
1e:87:89:a1:5a:2c:e8:03:34:69:d4:27:ff:98:61:4c:35:90:
fa:a2:53:08:83:92:3a:ad:1c:23:26:2a:23:76:74:30:36:79:
33:6f:1c:3a:48:d0:87:4b:8d:57:d6:ee:1f:33:79:41:e1:8e:
15:29:6b:bc:5a:88:ef:3b:ed:ac:0e:f4:40:99:f7:a0:28:9f:
8a:2d:b8:cf:d8:9c:fb:9d:14:0d:df:23:e8:d3:68:f5:17:ad:
65:e3:cb:b5:df:30:c9:43:e9:18:15:63:6a:4a:a8:f6:44:ba:
ab:22:92:85:52:20:41:73:c3:d1:59:6d:b4:cb:e2:cb:5c:a8:
bc:71:66:7a:ba:2e:fb:2e:11:98:a0:8e:06:34:53:6d:c1:77:
50:37:89:97:aa:ec:e4:11:20:bc:78:11:a1:4b:fe:24:a2:d6:
b8:90:cc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:17 2025 by rpki-client