Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7af31661-e511-3de0-bf67-d0d0047b9df9.roa
File: 7af31661-e511-3de0-bf67-d0d0047b9df9.roa (raw, json)
Hash identifier: O103h5spltHoRaZIkoEHN9UdXTDf9qEnioPCF8wXWI0=
Subject key identifier: 3F:5E:A8:DF:BB:7A:41:9B:D1:C9:80:69:ED:63:C7:95:5A:FC:25:07
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3309445414733DF88CD7E480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7af31661-e511-3de0-bf67-d0d0047b9df9.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 76.205.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:09:44:54:14:73:3d:f8:8c:d7:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=cfa9c9dc-8bf7-404e-b71d-4c90301b8dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:6a:d8:fd:a2:bd:1c:77:54:82:55:76:0b:
25:6b:88:78:b7:a4:11:99:fe:ff:14:30:45:49:9a:
d0:09:8c:8e:3e:b3:06:27:43:57:3d:03:a1:34:b3:
ae:f4:5e:b0:1d:2f:fa:99:30:a0:01:4f:f2:02:80:
a0:12:bf:54:65:0c:d3:4c:1d:95:a2:fd:d0:01:51:
04:fe:17:34:f1:7d:12:ec:e8:6e:52:3a:5a:ef:16:
74:b9:60:7a:b8:1d:c6:78:4c:46:f7:d2:cf:af:d8:
01:5f:46:1f:7f:70:e5:8a:a3:f9:c5:c1:f0:01:2e:
38:1e:ad:2c:48:8e:c0:36:91:fc:41:db:8a:df:99:
14:f4:00:86:cb:a7:c4:6f:c9:0b:17:d4:d4:36:17:
7e:31:f7:b3:60:2a:26:fc:08:ac:df:ea:de:cd:ba:
51:f7:b8:05:45:d5:f7:24:f2:16:88:78:8f:7b:06:
41:52:c8:d7:40:62:3b:8f:38:53:b8:ff:db:9f:fd:
94:5f:b6:b5:ff:1d:20:98:7a:c0:bd:b8:4d:72:a8:
ec:46:19:f1:b6:b3:5e:04:31:62:16:ad:b2:16:66:
75:21:02:aa:6e:fc:72:57:11:43:03:d3:30:be:af:
9b:66:cc:e0:35:6a:54:56:71:14:66:b3:bf:c4:d5:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5E:A8:DF:BB:7A:41:9B:D1:C9:80:69:ED:63:C7:95:5A:FC:25:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7af31661-e511-3de0-bf67-d0d0047b9df9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.205.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:61:ad:a6:4a:cb:cb:cd:90:ec:1b:c8:10:e0:af:f5:ed:66:
2d:ff:32:3d:d4:21:d6:05:76:ba:a4:22:3c:b5:17:5a:74:71:
07:19:43:09:23:87:c9:30:48:85:49:46:a3:23:c1:ba:8f:f9:
b3:6b:ba:1f:be:8d:68:4d:29:33:31:c6:ba:1d:42:9a:16:e8:
a1:97:98:e6:c4:92:c5:e8:41:a6:2a:58:5b:4d:5b:3c:38:16:
87:91:1e:00:d3:ae:5a:44:31:bd:9f:d7:87:24:3c:67:a1:c8:
c3:c8:72:b2:ea:59:fc:41:ca:bb:ca:50:1a:1a:ee:50:6f:90:
ab:97:9b:2c:28:27:15:93:c2:5f:7f:1e:86:42:0f:90:0e:85:
ec:b9:08:a8:1d:e3:26:a9:a3:10:45:c9:13:16:12:ad:d3:89:
12:29:5b:3b:8a:7c:f1:89:9e:d6:89:ba:0d:f3:25:92:02:c1:
ff:12:20:e8:55:77:7b:f6:52:74:8e:6c:55:ae:3d:c3:b6:c7:
04:06:ce:93:2a:8c:39:82:ab:bf:db:4f:bf:9f:78:88:9c:f2:
6f:aa:74:4b:2d:67:94:74:98:e9:61:0f:0d:a5:69:f5:0b:5e:
17:43:ec:95:9f:76:cd:d2:fd:12:9a:8c:c1:97:11:53:96:36:
8f:57:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:38 2025 by rpki-client