Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8159747e-d8c2-3913-a4e6-5224e506f1a4.roa
File: 8159747e-d8c2-3913-a4e6-5224e506f1a4.roa (raw, json)
Hash identifier: k79HTqSAdiBiJ5kmO12rXQRmYZRivbOpGt7NaTmCxJw=
Subject key identifier: DE:A1:7E:C0:7B:8F:77:15:09:45:FA:9B:01:1C:E5:65:EE:E7:F1:5A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D812C8BFCC690615DCA6B2840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8159747e-d8c2-3913-a4e6-5224e506f1a4.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 70.240.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:2c:8b:fc:c6:90:61:5d:ca:6b:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=443e0cd9-bed2-4297-8377-58f7ed4a9c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:2e:bb:fb:67:e0:c6:c8:b4:32:1b:56:fe:
e6:88:e1:08:6d:36:94:a4:07:29:f6:ee:18:e1:f4:
f2:1f:85:0e:ba:48:c5:27:68:4f:43:e9:27:7d:ea:
d1:5e:d3:f4:a1:4b:a6:7f:a5:4b:06:e6:40:28:19:
7e:74:cd:36:ce:e8:b2:1f:58:dd:46:d9:6e:fa:d0:
d6:93:4f:d9:e7:cc:88:a4:fb:78:d2:1f:b7:1d:d0:
ab:e4:25:9a:b8:87:37:6a:01:6a:15:65:50:44:52:
e3:bf:99:3a:a0:e8:bb:85:45:11:b9:e0:fd:eb:18:
13:28:77:3a:63:75:3f:25:e7:d8:a1:62:7e:a0:8e:
47:2a:11:50:e5:80:46:91:59:d9:7c:af:cd:b6:46:
01:6f:74:6b:51:da:e3:6a:93:b6:76:bd:a8:03:56:
bd:4b:c4:4f:f4:50:2c:85:c1:44:95:46:a7:eb:bf:
e7:ca:be:6f:a8:9e:be:0f:8d:69:52:fe:06:be:fb:
e1:bc:f5:45:05:f9:54:71:7d:ab:24:8c:78:ef:2a:
20:78:a4:94:86:e9:60:1d:3d:4a:a3:bc:55:6d:e7:
db:ba:53:b9:86:49:09:5b:23:07:77:5f:e2:d1:9d:
13:a0:56:4d:1a:fa:e7:ac:d0:be:a7:b9:54:d1:df:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A1:7E:C0:7B:8F:77:15:09:45:FA:9B:01:1C:E5:65:EE:E7:F1:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8159747e-d8c2-3913-a4e6-5224e506f1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.240.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:b5:0e:5d:ac:1c:ea:2a:96:c1:e8:24:67:09:d8:f0:16:05:
84:c9:27:00:b0:c2:d4:2e:2d:b4:4f:06:7d:c2:31:f7:f8:ce:
f0:80:01:ad:b4:6d:8c:eb:51:4d:2f:75:c9:8f:59:b6:52:f8:
8d:bc:00:9c:ea:fa:58:ed:98:52:ed:5a:22:e8:9d:9e:d4:10:
fe:a4:51:7d:ac:6e:94:db:8a:dc:ff:f9:d8:06:9e:08:47:bd:
e7:b8:60:3c:84:20:5f:21:dc:68:23:f9:6a:6b:0c:60:84:61:
c8:47:1a:9f:d8:93:f5:92:17:df:e5:ca:df:33:db:e4:9c:79:
85:52:82:4d:57:d2:dc:f9:f1:e2:52:67:1c:2c:cf:bb:20:ab:
c0:d7:49:a8:52:97:6a:a9:ba:d2:a4:0b:6f:af:36:e9:ef:b1:
82:4a:9b:77:76:22:a2:b8:40:b6:57:cf:ea:a2:b8:06:93:2a:
be:68:88:c5:fa:4b:90:4b:39:15:1e:c6:32:33:2d:7c:1b:cb:
68:06:43:95:b9:9f:c1:d0:cc:2a:cd:ec:d9:8e:af:30:0c:a7:
be:43:be:a9:2d:03:4f:65:8c:32:65:bc:da:01:50:ec:de:12:
27:33:71:b2:41:11:47:e0:40:06:87:1b:f8:2e:d9:26:00:41:
50:ce:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:26:57 2025 by rpki-client