Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b0a99a4-6555-3e7e-8274-850cfed43a7b.roa
File: 8b0a99a4-6555-3e7e-8274-850cfed43a7b.roa (raw, json)
Hash identifier: E3WXJkUO66cH58g81UN5WghkHLZ+axK8I6Oc9z3Vu8c=
Subject key identifier: 37:CF:BD:4B:B4:A9:3C:9F:61:26:A0:5E:28:FC:7E:38:D2:7F:9E:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF8A31E8D72741E8B4A55F5F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b0a99a4-6555-3e7e-8274-850cfed43a7b.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 174.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f8:a3:1e:8d:72:74:1e:8b:4a:55:f5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=35758f1c-dbec-49bd-8275-2260327fcaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ff:16:8a:fd:7d:bf:99:87:5c:10:c0:91:9a:
e3:01:a9:22:79:82:fb:6f:ae:44:c4:a5:2b:d8:d3:
d5:24:f7:77:d7:70:65:1d:53:64:1f:c6:fc:f5:71:
1c:72:8c:d5:39:cb:0e:1d:46:ac:32:8f:3f:24:17:
46:0e:22:f1:5a:48:75:1c:69:51:5e:33:4f:3c:67:
54:98:66:5a:c4:f0:a7:a7:77:3b:cb:f3:2f:e2:7b:
64:73:61:6d:f5:ba:70:da:39:52:c3:11:31:be:3d:
71:9d:be:ce:06:c5:55:c3:41:c4:95:14:2f:c2:24:
b7:6c:4d:87:28:3c:8f:fb:99:9c:aa:16:0a:f8:87:
0f:64:34:8f:07:b9:70:cb:42:10:29:01:a4:bb:32:
25:d2:ee:f0:27:d1:1c:7a:6f:d1:69:b6:8b:ab:24:
26:d3:eb:63:cd:a3:cd:05:d4:73:be:e0:e9:de:ef:
77:a1:84:65:69:76:69:05:55:9a:21:46:d6:49:92:
0d:87:e8:91:1f:ad:87:2f:e0:65:8b:16:7c:21:13:
cc:7a:75:88:16:fc:84:b0:d8:e0:4a:61:98:5d:d8:
0d:dc:0e:1c:21:bc:47:5f:7d:72:5a:19:9b:5c:75:
7f:74:86:b9:26:6b:98:8e:8e:23:31:55:6d:b3:e1:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:BD:4B:B4:A9:3C:9F:61:26:A0:5E:28:FC:7E:38:D2:7F:9E:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8b0a99a4-6555-3e7e-8274-850cfed43a7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
174.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:bb:82:d6:d3:3e:f2:c3:9f:a6:79:a2:1b:bc:43:e0:04:5b:
35:b5:85:8c:85:4a:9b:53:95:bb:99:d9:71:08:d7:17:41:47:
90:8a:0b:84:7c:1c:52:81:31:7e:f3:fa:28:65:32:06:cf:48:
68:00:e9:7d:dd:82:88:19:49:dc:14:34:17:6a:d1:3c:c5:d6:
51:3f:ec:e4:60:45:e0:70:68:03:7f:2d:c5:55:5b:7b:e3:80:
90:b3:62:ee:b7:aa:e3:41:39:1e:97:ca:76:db:28:a4:af:3e:
dd:24:dd:fd:79:44:c6:4b:c8:5a:ad:1f:9f:ce:34:be:2c:8c:
81:a6:24:8b:6f:c0:d1:f5:b1:8d:42:88:ab:5c:c3:07:b2:f0:
2c:fc:0b:c7:40:28:7e:c7:fa:44:84:23:de:4b:4d:4b:e3:88:
ab:6a:88:09:2d:c9:af:44:ff:af:c5:ca:0d:65:3a:47:a1:c1:
86:23:54:84:9f:bd:a6:85:7e:76:37:0a:f1:06:51:59:dc:db:
1f:e2:66:bf:38:16:42:13:db:f8:61:e0:19:63:86:93:93:48:
49:41:51:e0:81:c0:d3:8e:a2:8d:d7:3f:1f:4d:b9:74:3c:d9:
8d:2e:c0:64:4c:3c:45:18:c4:2a:87:01:e6:13:3f:89:75:f0:
a7:9c:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:01 2025 by rpki-client