Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7fc85011-e571-3015-9e98-4ed841e50d47.roa
File: 7fc85011-e571-3015-9e98-4ed841e50d47.roa (raw, json)
Hash identifier: roid5NOawZcS+Un16rbLX/aTL/naf/YzV5yuPEt0Czw=
Subject key identifier: 88:67:E1:60:87:B4:CF:2C:0D:35:DA:A0:89:E0:C6:BD:DC:D9:52:A9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401C39C4FDC7197C97396D3FA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7fc85011-e571-3015-9e98-4ed841e50d47.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 170.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:39:c4:fd:c7:19:7c:97:39:6d:3f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=3e5a1147-4394-421c-87ec-ab3a045e437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:ed:4a:c4:00:27:db:2d:de:94:6c:da:20:
2b:3c:02:a3:93:68:92:22:81:58:1c:55:8b:58:26:
79:65:d7:4f:f6:ae:e5:24:6f:11:24:67:e3:8b:29:
8d:59:75:0a:ec:2b:94:5f:aa:7c:4d:44:0d:6d:07:
ca:6d:03:ca:d4:2e:4a:71:6e:a4:b3:90:00:cf:b7:
4c:fc:5e:73:28:ae:6c:eb:23:3a:1a:f9:16:ab:5f:
8c:61:a4:a9:6d:e1:f3:bf:ba:96:03:f8:7a:45:1f:
ec:7b:ed:46:55:23:f4:3d:86:ef:0d:00:2f:5e:0c:
56:8e:3f:6d:12:b0:ef:23:e9:7f:e3:e1:59:00:f9:
b6:61:a9:41:ae:65:fb:54:d1:ea:de:c3:e5:27:4b:
6c:47:26:eb:72:60:5e:18:3c:ea:9f:16:be:ff:a4:
19:6c:8b:fd:fd:a6:52:d2:f9:86:be:99:e4:47:51:
fb:28:d0:14:42:14:f2:86:88:a1:b9:a1:94:a0:ff:
7d:84:67:28:76:a2:5e:58:00:7d:e3:56:ed:e5:7a:
41:be:77:da:3d:75:92:cb:ce:0d:43:d1:37:ff:11:
4a:32:89:5d:bd:66:6e:a9:21:3e:dd:15:0e:78:e3:
4f:e8:0a:b2:03:9b:94:a2:2c:15:ec:77:75:0a:98:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:E1:60:87:B4:CF:2C:0D:35:DA:A0:89:E0:C6:BD:DC:D9:52:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7fc85011-e571-3015-9e98-4ed841e50d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:41:1a:47:1c:7d:a0:44:bd:23:ee:f8:8f:98:4c:ca:11:18:
8e:bb:ef:af:c5:a8:84:f8:3e:e2:8a:28:90:68:4c:3e:e7:92:
c7:17:0b:38:75:92:3f:a3:ae:47:fc:7d:82:c2:bc:02:5c:87:
17:d8:ad:12:de:6d:30:f7:44:c2:64:cd:57:a7:a6:e1:03:f8:
f0:7f:24:20:ae:d4:75:2e:a2:a3:bd:4b:6f:43:de:91:ee:d3:
d3:67:08:70:db:1a:f9:03:32:9b:09:45:1a:31:31:cd:bc:58:
31:58:16:83:68:44:8d:a2:e0:e4:7f:e5:0a:75:34:f5:b0:57:
1d:43:01:a8:d7:46:9e:4c:82:15:8d:ed:e9:e9:d5:15:ef:93:
6d:b3:45:b6:54:e7:c8:87:99:32:11:88:f8:57:c4:ab:ac:b1:
3e:00:57:2e:18:b8:f3:86:5a:56:22:73:90:dc:27:f9:01:ae:
65:15:66:8d:3b:2c:2b:ef:28:bf:99:1a:d8:27:36:c1:48:9d:
d5:db:17:13:21:95:eb:2c:1c:1e:1f:7a:80:d4:98:a6:66:a9:
2d:49:9a:4e:7c:94:da:b0:45:2f:29:7e:cb:55:aa:ab:52:cd:
45:89:79:72:8f:19:55:0e:5d:f6:95:f9:da:67:70:11:5f:4f:
ca:54:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:21 2025 by rpki-client