Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84a51bc3-1714-3af3-a7b3-828ce041016c.roa
File: 84a51bc3-1714-3af3-a7b3-828ce041016c.roa (raw, json)
Hash identifier: sD0sFBYbkQwjbB21h+roqU5J9Kiloe3w4r4sTEnfuWc=
Subject key identifier: 51:C0:07:6E:65:FF:09:5C:99:50:08:6E:54:9E:73:02:4E:5A:64:41
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A105B261B90ED436C491D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84a51bc3-1714-3af3-a7b3-828ce041016c.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 69.210.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:10:5b:26:1b:90:ed:43:6c:49:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=3a925e05-f3ab-4ff0-85ab-103fcfa96106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:29:43:4f:c7:91:e9:a3:9e:67:3f:22:b4:
fc:86:62:c0:7a:6f:78:15:cb:29:66:f6:66:bd:a0:
f4:9b:a4:c1:43:91:42:ba:d3:42:61:bd:b7:3c:ca:
18:d4:5c:96:36:3f:89:57:30:73:b0:38:e8:96:fc:
6d:10:05:87:1c:4a:bd:50:ed:50:85:90:98:8c:1d:
b3:43:d0:64:05:e9:9d:85:f5:2f:e4:e7:14:7c:ff:
14:0b:d2:f3:3d:92:ba:e2:e8:ce:14:10:0c:58:52:
59:11:b5:23:25:6d:70:8b:9d:ad:f5:63:66:ca:99:
96:27:94:20:c6:60:73:47:65:bc:a7:d0:57:e3:df:
dd:f6:e8:27:d2:1c:64:e9:e1:81:b0:c6:92:0a:d6:
fe:4e:9a:ea:4a:53:45:3a:49:45:6c:e7:bf:10:56:
e7:48:d6:70:55:45:0a:1d:5c:7a:57:5f:c1:a7:52:
65:10:17:bf:00:be:4b:76:b2:71:f0:0d:73:a6:d7:
31:56:63:95:57:e4:82:9a:40:7c:a7:d1:db:cc:d4:
1f:8e:61:29:91:32:2b:98:b8:cc:8b:8a:36:36:37:
f0:80:6a:66:f4:c6:d3:2a:58:90:ed:f3:32:bb:f4:
55:ee:90:56:d6:da:b5:cf:c8:6f:0e:0e:6a:d1:2b:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:07:6E:65:FF:09:5C:99:50:08:6E:54:9E:73:02:4E:5A:64:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84a51bc3-1714-3af3-a7b3-828ce041016c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
69.210.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:47:b8:99:7e:ed:ea:dc:fe:e4:c3:cc:76:9e:c0:f5:f3:3f:
d7:e6:80:df:c4:8a:ca:2c:59:ac:90:da:ca:58:bc:ee:b3:91:
20:65:31:1c:44:5f:59:86:a4:5f:89:1b:32:67:db:fb:54:af:
15:16:d6:25:ab:50:17:50:a1:a7:a4:8a:da:af:e2:f0:ef:df:
a4:f5:c0:d3:ce:26:d9:84:16:8a:7d:2d:3c:62:20:97:67:62:
df:60:cc:f2:1b:31:da:15:d6:20:19:30:c6:5a:12:03:6d:fe:
5e:1a:48:a2:a3:2c:11:51:01:24:6f:9a:33:3d:41:2f:f0:7e:
df:9a:04:ce:d2:f6:d0:c3:2a:28:0e:3c:43:9e:b0:a9:98:32:
92:da:87:26:e6:eb:e9:b1:50:99:f4:1f:9e:ef:e1:27:1c:76:
d2:05:8a:f1:da:af:9c:4c:32:5a:ad:87:67:ef:2e:b6:4d:3a:
71:29:8e:c3:56:77:9b:e1:04:45:48:8b:f6:39:d3:8b:df:cb:
b5:01:e3:ef:b9:24:ad:bd:a1:fc:46:fa:52:de:a1:00:dc:f3:
2f:a9:bf:d6:83:91:a7:97:d3:b7:7d:9a:52:37:36:d8:14:28:
0c:8c:7f:4a:8b:ff:7f:f7:41:2d:e6:e8:7d:cc:3b:77:9c:7e:
5f:d6:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:39 2025 by rpki-client