Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85d720d3-e9b7-34b1-980a-47501d245bd1.roa
File: 85d720d3-e9b7-34b1-980a-47501d245bd1.roa (raw, json)
Hash identifier: wZyLKSvBLJe24E0IKlXBEBZzsY5ThFBq08tiOULLY5M=
Subject key identifier: 61:27:6D:B6:60:8B:1B:7B:28:F2:A4:26:23:00:05:4E:41:F3:8F:FF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B9AA9B18E1834AF680CC5580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85d720d3-e9b7-34b1-980a-47501d245bd1.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 75.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:aa:9b:18:e1:83:4a:f6:80:cc:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=86679144-ed52-4dff-9622-3de522d96773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:bd:88:31:d7:0f:fb:42:18:96:a7:d9:a3:
37:63:6f:38:a7:57:cc:00:00:7f:d9:89:45:e1:fc:
44:27:65:62:b7:48:92:bc:d3:75:f0:67:0b:ae:08:
1d:fa:5b:e1:56:6d:09:b7:69:ec:e4:7a:7a:f2:95:
bf:8a:3c:00:be:96:9c:0a:7a:d2:45:ad:83:30:d0:
d4:c5:f8:99:5f:47:0e:92:d8:41:f7:ae:fe:8c:a7:
c8:16:13:5f:2f:09:c6:5e:34:3a:bb:14:73:a5:22:
cf:c8:ba:8a:34:e9:d4:80:7d:a1:68:ef:5a:4c:82:
31:ec:b4:6e:8e:32:df:0c:78:21:c6:c5:ab:70:7f:
ac:c3:8f:86:cf:be:38:c3:13:ce:6d:01:75:c0:0e:
8e:40:c3:2e:7b:ec:92:03:1e:cc:7f:ca:bc:74:bc:
82:af:ec:78:69:f8:f8:6a:e2:b8:c6:dc:23:0a:d6:
b6:ba:b5:2f:78:69:6b:51:ab:15:6b:6b:0a:87:74:
67:dc:08:fc:4a:25:28:12:eb:25:67:8c:fb:c6:f5:
e0:ea:8a:34:c5:e5:bb:0c:67:89:73:a2:29:a0:0f:
46:8b:6f:0e:b8:02:b8:f0:66:1b:99:56:35:f3:42:
7a:5f:c8:69:df:d4:5d:9b:77:d3:59:df:c9:21:09:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:27:6D:B6:60:8B:1B:7B:28:F2:A4:26:23:00:05:4E:41:F3:8F:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85d720d3-e9b7-34b1-980a-47501d245bd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.79.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ac:fe:ad:7b:2f:83:e3:17:f3:ff:28:d2:1c:c8:e4:78:7f:
bd:48:fa:45:b8:c1:57:9a:72:f5:46:c8:b0:cd:07:d3:8b:5a:
af:d6:ef:a6:25:7b:55:06:00:8c:d5:4b:e0:4f:8d:02:da:5c:
79:e5:31:66:53:62:0a:7b:3c:d8:2b:4c:19:97:98:83:d6:da:
7b:f6:e0:f6:8e:4d:60:c2:bd:eb:9c:bc:1a:ef:9b:97:75:fa:
c2:ad:64:2f:2d:92:fd:25:fe:56:f2:b8:19:d3:2c:b4:33:9c:
f0:fe:70:e4:76:1c:7d:12:de:01:c9:35:81:41:1f:4e:17:a0:
a0:53:f0:b2:4c:f3:d2:53:e3:96:2b:ed:5c:a9:b3:4c:01:55:
c5:46:43:9b:fd:eb:40:ba:13:34:1c:70:23:67:02:f0:97:64:
e9:f2:17:1b:f6:63:b0:c3:55:7b:8f:33:9d:c8:a4:ee:ba:dc:
95:48:fe:c0:28:94:26:8d:83:d5:0c:81:bd:43:8a:53:b1:67:
bc:c7:4c:c7:ce:da:41:b1:dd:4a:a0:f6:8b:d2:36:44:68:a0:
7c:0e:ad:26:50:fb:e0:a8:13:5c:ab:ae:59:30:46:95:05:f8:
7e:96:82:0c:50:3e:99:a8:ee:f0:54:cd:ea:5f:0d:97:52:08:
d9:7d:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:14 2025 by rpki-client