Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8fb92305-66a9-3f52-b525-72b09535fe5f.roa
File: 8fb92305-66a9-3f52-b525-72b09535fe5f.roa (raw, json)
Hash identifier: D/ScvHRLjmuiHSbbyM6fu4guqJUUKoEGOYl57vyhZvY=
Subject key identifier: A3:6E:32:8F:C5:E8:45:C5:8B:79:53:26:61:33:AA:3B:97:D6:6E:05
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D59F1F06A47DD664E5AEA8000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8fb92305-66a9-3f52-b525-72b09535fe5f.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 67.220.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:f1:f0:6a:47:dd:66:4e:5a:ea:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=58598399-8d2a-48b3-967c-5ec8f491fe2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:09:79:b7:bf:c8:02:20:bb:0d:c9:24:e7:
36:23:40:37:d3:d6:b4:c7:3e:c1:8e:ce:7b:1f:8e:
56:79:32:f8:54:bc:b1:a0:dc:b7:c2:be:c6:dd:7a:
68:b5:d4:c5:39:7c:7f:ce:aa:3c:96:2d:8d:50:d9:
38:5c:8f:13:f1:d6:42:ed:b9:95:88:78:82:7c:b9:
22:87:01:83:01:3c:99:46:ec:7e:0c:c6:90:c7:20:
96:81:9b:b9:09:d4:3d:5a:98:4f:d2:1e:55:41:74:
56:0f:bb:60:db:29:6b:f0:8f:e1:33:02:d9:a2:b9:
c2:14:29:50:f7:97:c7:2a:ed:c9:71:ff:b4:bc:78:
a4:69:aa:12:de:92:1f:0e:c8:bc:2d:c6:41:63:f5:
ee:8e:21:3c:84:64:ff:53:ef:7f:23:7b:b2:a9:c6:
4f:52:60:fa:dc:01:70:ec:de:e0:8e:51:4f:1e:d2:
05:88:a4:79:ab:e2:e8:44:f2:c0:9b:91:b0:fe:75:
1e:ac:85:d1:a8:bf:8d:a6:30:62:f4:3b:58:8b:ed:
ea:49:33:e3:d4:d5:d9:f5:a3:69:f5:1c:b2:40:c7:
66:53:a7:67:ce:54:9d:ff:c9:8e:70:e2:5e:f3:30:
92:d5:5e:de:46:2c:37:16:32:ac:e6:2e:ad:83:f6:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6E:32:8F:C5:E8:45:C5:8B:79:53:26:61:33:AA:3B:97:D6:6E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8fb92305-66a9-3f52-b525-72b09535fe5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:bb:92:3c:61:7f:86:0d:47:7b:04:7d:47:bb:c1:33:70:6c:
64:a7:a5:55:4d:03:56:bf:e9:60:06:86:cf:54:16:9a:d0:7e:
55:88:c3:3a:19:70:81:fe:37:9a:84:56:8d:c7:33:86:60:41:
21:9c:f3:41:39:22:78:52:10:36:86:ab:66:bf:7d:37:9c:ff:
91:3f:1d:f5:d9:15:27:3c:42:a3:95:e1:bb:a5:71:13:d4:4c:
6b:1e:ea:90:fb:ef:f1:76:45:4b:4c:ac:2b:1d:2f:4a:a7:da:
57:23:d9:0e:05:b6:6a:91:b7:25:4f:c0:89:03:79:ef:7b:d5:
10:25:57:93:04:ca:b8:12:cd:fd:67:85:32:6b:52:c7:4b:cc:
3c:47:d4:0f:b4:98:b6:73:07:47:da:f6:7b:34:d8:79:cf:09:
8e:22:ce:d1:79:c4:18:3d:0c:6c:e5:79:e2:7c:61:88:d2:c2:
69:a1:aa:cf:23:9d:45:d1:a1:51:ee:26:06:ba:d4:c8:eb:fb:
85:df:2f:d2:48:0b:ec:ef:a9:79:08:7a:8a:1f:e8:42:fd:fe:
d0:23:7c:a0:ed:c0:75:31:25:8d:4c:3a:4a:f3:6e:27:89:2c:
bb:40:2f:d0:c1:c2:ad:1e:98:88:a7:7d:0c:d6:3c:cd:be:db:
df:db:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:07 2025 by rpki-client