Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/931b69e7-85d6-3099-bdfe-a3952016e015.roa
File: 931b69e7-85d6-3099-bdfe-a3952016e015.roa (raw, json)
Hash identifier: enXeowsWa8Ccb4o8tQAUOTGK3Z43dLp5JhVjia+bBRc=
Subject key identifier: DC:88:89:AC:E4:D5:B8:21:9E:0E:7F:EE:96:9C:C5:BE:BE:09:29:32
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C967730140C2AE65BAAABD540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/931b69e7-85d6-3099-bdfe-a3952016e015.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:77:30:14:0c:2a:e6:5b:aa:ab:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=a9276cee-3280-4ebb-b70d-ed4b5f086635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:b9:91:93:58:8d:90:fd:24:2d:9f:45:e6:
33:a0:9b:fe:b7:b6:d1:d9:ab:e6:bd:b1:f1:2d:10:
d9:91:ae:ba:c2:de:4c:9f:70:65:24:b1:3d:e2:00:
31:08:11:dd:e6:33:33:fb:cf:7d:be:5e:f8:83:e4:
01:cc:8e:c2:72:1a:8a:fd:b8:35:80:1d:91:68:be:
6d:32:fe:85:97:64:7d:97:75:75:b1:f7:b8:44:65:
6f:ab:9c:e5:e7:c1:a3:a2:d2:fb:56:6a:e2:e0:2c:
93:5d:58:1b:92:90:eb:e7:9c:00:af:49:b4:9f:7e:
f5:b2:05:c9:5d:0d:7f:fb:ea:05:ca:1a:d7:62:5c:
d7:75:7b:2c:71:f1:95:7b:a7:dd:f6:67:0b:18:40:
67:4c:e4:0e:07:e8:fd:17:74:0b:bd:e8:a1:7c:78:
00:56:9c:b5:57:cc:f5:a6:b9:ff:b9:f6:51:29:a2:
33:76:17:54:95:94:fd:4e:f7:6e:62:90:2f:08:47:
81:16:34:07:96:9b:81:cf:bf:5c:b3:a8:6e:53:2a:
db:c8:92:ac:9e:f7:15:aa:5a:d8:1f:11:d6:03:75:
30:3e:34:31:da:62:84:f9:8b:e1:ce:aa:f2:57:1d:
0e:8d:ad:62:6b:f6:e2:cd:1e:0d:32:4d:4e:53:d5:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:89:AC:E4:D5:B8:21:9E:0E:7F:EE:96:9C:C5:BE:BE:09:29:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/931b69e7-85d6-3099-bdfe-a3952016e015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:56:bf:eb:b7:04:04:26:a3:7d:f2:cf:be:a8:e6:d9:1b:9e:
01:b2:21:f5:de:1c:83:89:9b:d2:59:d7:07:f8:f4:7a:63:18:
b7:38:bb:6e:f4:18:e0:c4:a4:2d:44:7d:09:30:ca:8a:61:60:
8b:39:e2:63:44:ee:c3:cb:c5:d0:5d:07:b2:97:25:5c:3d:7b:
94:dc:a5:a8:f7:2d:6c:e0:de:92:af:eb:a4:ef:cb:d7:51:b7:
2e:09:65:77:3e:a0:3f:e5:4a:8a:f0:32:ec:53:9b:b7:d3:6f:
45:0f:a3:1e:29:11:3f:52:50:75:38:30:21:23:b1:69:93:c9:
6d:a5:3b:b1:4b:39:bb:74:50:1f:4d:df:a2:82:1f:e6:a1:5f:
a0:cc:07:d5:3d:47:53:a5:1e:75:d3:ae:49:a4:10:d0:97:ba:
c2:51:58:dd:7a:0f:dd:b4:0e:de:1a:29:26:be:2c:9e:04:ca:
3d:ef:4e:d3:0c:5f:ff:5c:da:ab:6a:43:94:cb:6a:74:16:39:
61:6e:3e:aa:51:73:5c:a5:7e:4f:58:f8:07:e1:4a:de:3e:76:
d3:74:c6:51:db:b3:e5:92:65:27:1f:52:b4:2d:7f:d8:37:8f:
fb:ec:8b:18:5e:e8:16:de:30:a6:bb:c3:cf:3e:a4:92:48:6c:
9a:84:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:28 2025 by rpki-client