Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c583239-3c66-30ac-a510-51dc1715ba97.roa
File: 8c583239-3c66-30ac-a510-51dc1715ba97.roa (raw, json)
Hash identifier: eshLNkrB5MZxaGJVItuADW2UN53lwmDfvQfOsv1RtzU=
Subject key identifier: BE:0C:4A:72:05:46:8D:9F:04:BE:CD:25:C1:C1:12:72:24:4B:F8:44
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF62FD2A66E705443F70E4D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c583239-3c66-30ac-a510-51dc1715ba97.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 76.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:2f:d2:a6:6e:70:54:43:f7:0e:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=c5bf9c76-2451-48c8-912e-31a0f6d27d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:b9:c5:39:81:10:5e:2d:1c:33:31:d7:d5:
68:8f:0f:76:9b:95:86:76:66:bc:78:98:c2:ec:dd:
5b:42:12:60:c7:38:00:93:3f:40:94:61:52:b1:ef:
25:16:78:a8:42:12:e0:85:ce:74:11:df:c6:c3:da:
fe:98:14:4b:b3:b0:e8:27:0d:11:72:07:a7:dc:36:
89:5c:cf:bc:0e:3d:72:ff:a4:11:6b:f9:b3:2d:09:
71:73:f4:92:a4:a6:6c:a3:7b:1a:c2:7e:b8:2a:80:
79:64:e4:9a:37:62:71:9d:c0:37:08:a8:1d:73:0f:
e4:a5:a2:5c:b8:e6:27:2a:72:b5:e8:94:a9:b1:aa:
1f:d9:95:16:4a:cf:27:e3:1c:2a:be:f7:b4:65:d6:
d0:c3:ab:81:89:38:0b:29:c2:dd:d3:91:54:54:35:
25:83:4a:fd:16:c8:9a:59:08:e9:d4:56:c2:4c:b3:
e5:54:c3:68:77:b7:32:18:79:b0:ae:2a:a6:ab:b4:
48:a8:95:3b:51:fd:3b:f2:5f:9f:a1:8f:d9:0f:a7:
f6:41:c7:70:bf:1c:ba:73:08:77:10:17:37:ec:c3:
ef:a0:1c:42:f0:2a:7a:78:c8:8c:f8:de:35:91:89:
82:a3:0d:a3:e1:c9:25:29:39:9e:4e:44:4f:d8:3e:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0C:4A:72:05:46:8D:9F:04:BE:CD:25:C1:C1:12:72:24:4B:F8:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c583239-3c66-30ac-a510-51dc1715ba97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:17:75:cf:21:da:12:02:0f:17:a5:31:a0:10:bb:f9:e2:e8:
bb:c4:57:cf:16:7b:82:2e:ec:f1:12:b5:b7:21:e4:72:0e:8e:
9c:dd:f5:1c:20:b9:2b:ac:01:0c:7a:ac:ca:34:dc:61:dc:0e:
18:6c:bb:8a:b3:83:ed:82:4b:e6:37:3d:77:40:06:cc:f7:e9:
6f:a2:71:ca:6c:0d:3f:cc:71:46:2b:98:dc:2e:58:3e:7f:e9:
b8:1d:96:ae:c0:28:d9:5a:fb:c3:ff:fd:a0:64:d4:bd:07:27:
8c:fe:38:b1:7c:4d:89:31:ae:2e:6f:14:da:3f:82:3c:f4:50:
95:27:80:67:aa:e3:b0:f0:93:44:d5:99:f0:f2:d5:30:11:e5:
29:1f:99:38:b4:b0:67:ea:fb:0b:aa:06:e7:e4:b1:80:15:41:
70:70:72:57:92:a6:1f:06:9f:41:04:2f:02:19:f7:45:34:49:
4c:89:8e:eb:ef:a6:bd:e7:5b:4c:be:e2:f4:10:67:d0:81:1f:
b4:7a:3d:2c:32:40:cd:dc:4b:a5:ca:31:b6:9e:77:9e:83:3e:
d3:1b:e5:af:5a:c1:76:41:71:e8:74:ce:8e:5c:93:7d:65:90:
9d:b3:6f:96:dd:03:bb:03:83:d4:6d:9a:01:80:30:d7:0f:15:
d9:4e:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:52 2025 by rpki-client