Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f702c49-ffec-3405-bcc5-3460125cdf3a.roa
File: 7f702c49-ffec-3405-bcc5-3460125cdf3a.roa (raw, json)
Hash identifier: IOh2PPYNGN+e0mz83M3qplQWo3tko9uBfUnqRWrg6XU=
Subject key identifier: 65:70:75:74:D2:F6:27:FF:0F:95:1F:4D:E1:DB:B1:3A:15:38:63:FE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D32FAB0AA55E54DFD4BCFF800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f702c49-ffec-3405-bcc5-3460125cdf3a.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 75.3.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:fa:b0:aa:55:e5:4d:fd:4b:cf:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=4e298d12-6b80-4165-9c08-abf47ed40478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:0b:4f:0f:15:a2:ea:2a:df:07:3d:ca:89:
5f:82:8d:d7:aa:4a:70:14:bf:cd:a4:25:61:07:3f:
91:ec:74:44:54:e3:10:49:f0:1d:26:67:0e:37:11:
aa:be:e2:c2:ee:a3:1e:1a:dd:d6:88:da:52:90:5e:
0c:aa:c4:3c:25:1c:9f:4e:ac:ff:18:69:46:cd:20:
15:53:2b:46:a7:d2:8b:f4:5d:bf:8d:ab:fa:d1:68:
57:05:fe:40:95:93:36:db:ed:80:07:49:df:d6:92:
cc:e0:1e:fb:47:51:ca:3e:c3:82:eb:23:2d:68:8a:
a9:1a:77:02:e5:0b:c7:42:ea:e3:bd:1c:84:cb:05:
3e:60:18:a6:07:74:4c:90:05:9d:8c:8d:3f:7f:76:
6d:99:56:ed:66:9b:d4:4b:41:9d:f5:46:4b:b2:31:
24:1e:3d:d3:c6:aa:d8:73:26:b6:57:a3:e9:49:ce:
03:5f:73:e8:be:12:91:4c:3c:a2:7e:35:79:99:42:
57:57:ca:cb:c3:1c:cd:bd:89:7a:dd:4c:29:20:4a:
f9:a3:84:6f:bc:c2:1e:db:e2:0f:06:5d:3d:78:fb:
1d:5f:17:f9:06:e6:1d:d4:46:56:76:06:ff:0c:4c:
d0:d9:25:a4:ff:3b:83:d8:05:c6:8b:20:72:7f:e5:
97:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:70:75:74:D2:F6:27:FF:0F:95:1F:4D:E1:DB:B1:3A:15:38:63:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f702c49-ffec-3405-bcc5-3460125cdf3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.3.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:61:7f:d3:25:72:3f:e8:91:a8:ae:93:01:cf:05:1c:d6:31:
11:e4:bc:41:7f:0e:f7:cf:44:95:d6:f4:79:94:7e:47:8a:95:
82:94:ef:f4:65:e8:8f:0e:2c:42:f8:fd:ed:0e:93:e0:12:c7:
59:a9:2d:9d:e6:a1:f7:64:44:ab:c0:46:a1:ef:3b:1e:1f:81:
d2:00:93:28:44:20:96:d7:47:b6:fe:12:a2:f7:b4:fa:f9:99:
24:a6:a4:cb:8f:68:64:73:b3:e6:a7:19:83:ce:e8:6c:40:6c:
f8:07:d3:d1:27:55:b0:5d:79:85:4d:f2:0a:76:80:1a:20:82:
40:86:13:2f:1c:75:f7:b8:ea:62:59:04:f3:a5:17:9d:3c:87:
e4:1f:22:84:e1:a4:fb:26:d6:ec:d5:5f:ef:38:59:b2:de:c8:
cf:4d:eb:c6:64:3c:fe:22:9c:cb:77:d5:43:61:1c:77:68:4c:
d9:64:ff:4f:25:56:04:08:6b:d4:71:05:3e:d4:64:7f:27:7e:
dc:17:a3:f6:b6:16:dd:a8:2a:0f:79:0c:97:a7:4f:eb:33:e1:
17:4b:52:ae:03:44:27:0d:40:0a:ec:e2:1f:ff:16:e5:aa:e9:
37:24:0a:bf:1d:e2:35:6a:1f:d7:55:6e:ff:87:2c:e6:e8:75:
6b:2e:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:47:42 2025 by rpki-client