Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79d4755e-f816-330d-8653-af4ef34324a7.roa
File: 79d4755e-f816-330d-8653-af4ef34324a7.roa (raw, json)
Hash identifier: GXJ3avaUrIpSjKC5uUBmvxmrbmtLU72IoE2LnTsLcJ8=
Subject key identifier: B7:B4:28:89:23:82:DB:97:8F:06:72:5E:A8:0C:F1:B9:02:FC:21:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6EA56A5ED5FF827965AC6C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79d4755e-f816-330d-8653-af4ef34324a7.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:a5:6a:5e:d5:ff:82:79:65:ac:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=b43f554f-7d96-41d5-9926-6fc4708d34b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:fe:bb:67:2a:7b:f5:48:d3:b2:0a:09:af:
8a:c1:1b:e0:fb:2e:8f:a2:d3:94:24:5d:ec:ba:db:
e5:77:19:2c:d7:45:45:76:76:fa:d7:ad:ab:5f:34:
82:82:1b:2a:c7:ed:d0:e0:fc:bb:57:7d:b5:ae:0f:
05:c8:ef:99:2b:49:4f:c9:ea:ce:de:6d:12:3d:d9:
6d:0d:1a:5e:93:dd:ff:7b:ed:57:a1:23:d2:e8:db:
89:48:df:24:bc:e5:cd:b4:9e:d7:85:f5:8e:33:d8:
ae:fa:c6:12:9b:cf:96:4c:29:e2:8d:b2:dd:03:d0:
8e:d5:0a:cb:cd:68:7d:3c:f1:59:b7:89:55:78:ab:
f0:46:4a:24:1f:71:ef:1d:6a:4a:83:54:e5:c8:ed:
14:a6:5c:fe:41:8e:e4:38:de:39:a3:08:52:62:3f:
e8:5d:e3:36:c1:11:83:45:e7:98:d4:c7:4f:66:5b:
06:f2:5c:2e:80:3c:76:b3:a4:d8:a0:c5:f7:a5:b0:
b0:00:71:ea:86:9f:ff:d2:00:32:2d:c6:9a:d9:43:
a1:bd:34:71:67:9b:36:5c:ef:fa:ee:61:88:33:c2:
77:45:30:a8:e4:ca:f8:22:ef:be:85:fc:df:19:2c:
a8:5e:a5:5a:68:e1:8a:1d:e9:c7:c5:9e:1a:e2:ee:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:28:89:23:82:DB:97:8F:06:72:5E:A8:0C:F1:B9:02:FC:21:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/79d4755e-f816-330d-8653-af4ef34324a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:41:fc:e7:c7:2f:ba:b8:a4:b0:d0:a2:03:0b:ac:e6:28:cd:
96:6d:01:c0:10:47:12:3e:6f:65:24:57:d9:27:f1:d8:e0:e2:
b8:68:32:36:ec:6b:2b:0d:4e:d8:4b:ea:00:ce:4f:4b:00:15:
57:3f:29:26:13:23:a2:f1:50:84:2f:d5:11:24:f7:5e:32:72:
13:80:19:81:dd:3c:7e:c7:a5:b2:75:99:98:76:7c:3f:a2:1a:
71:f3:f6:30:d7:d1:39:c9:98:e8:7e:f9:a1:c5:84:8b:ed:b9:
bf:14:66:36:88:c8:1c:27:f6:9c:ba:19:bf:3f:02:eb:8c:83:
0e:b2:b2:19:9e:c5:fc:4d:e7:dc:91:63:0b:f2:6f:ca:fc:63:
b8:d2:19:a2:e2:84:9b:48:41:35:07:d8:a5:17:35:03:cf:d4:
c5:c8:f1:96:e8:e4:c8:74:7f:46:34:fb:51:2d:88:c5:1b:67:
fc:60:0d:7b:f5:ed:05:72:52:6c:7f:b7:52:0d:7a:ef:7e:d1:
b7:d4:22:0d:5a:ec:03:c2:0e:26:d0:25:1f:1b:6f:1e:63:61:
e4:83:bd:96:31:33:f6:57:69:5b:df:cd:fd:28:af:b6:b7:e1:
62:b3:22:9b:31:b2:a8:3f:5c:5b:e0:21:56:c4:e6:09:32:0e:
ce:1e:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:47 2025 by rpki-client