Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/954ea63b-7599-3c9d-b486-ea5d32872d9e.roa
File: 954ea63b-7599-3c9d-b486-ea5d32872d9e.roa (raw, json)
Hash identifier: JK//Iuo1aIEukZxLQV+XJLJO7rNo2yVrmK2l8/EgFUs=
Subject key identifier: 64:65:22:23:65:1B:46:05:9A:98:29:52:06:A0:EA:8F:30:E8:F7:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584091E2A1845C3CF3595144F160
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/954ea63b-7599-3c9d-b486-ea5d32872d9e.roa
Signing time: Fri 13 Jan 2023 12:00:00 +0000
ROA not before: Fri 13 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 76.238.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:91:e2:a1:84:5c:3c:f3:59:51:44:f1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 13 12:00:00 2023 GMT
Not After : Feb 18 05:00:00 2023 GMT
Subject: CN=dd5cd117-2667-4a0e-aead-bbf96c142459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:61:9f:40:b0:2b:ec:7b:e1:b4:46:40:16:
ca:6e:e8:0a:e3:40:9e:14:b9:e3:73:be:e1:dc:5e:
d0:20:6f:24:90:28:2d:9f:a3:01:f4:d7:2d:61:3b:
6f:8c:4b:c4:c7:d4:43:12:94:72:93:47:4b:bf:f8:
ac:09:46:e2:58:36:5f:6d:34:62:a6:05:ae:22:45:
a6:e5:f8:2d:27:79:e1:6a:1e:43:f6:23:e1:5a:f0:
ae:b3:5c:f7:5e:cb:9d:34:aa:31:d8:ae:6d:03:be:
7f:68:d7:53:34:fd:41:3f:9b:bc:56:e8:76:fe:80:
fc:4a:4b:84:b4:71:22:77:bf:1e:9a:d6:26:b3:6c:
41:4f:16:ac:c6:9a:c5:dd:36:68:72:ec:2c:d7:d6:
13:30:f7:70:cf:af:ed:78:c3:06:43:f9:08:bf:23:
80:05:c1:5e:53:5d:0c:02:da:3b:46:c4:8a:5d:1e:
cb:61:73:ef:69:58:47:38:61:dd:0a:75:34:4e:5e:
ce:b1:43:b6:07:29:65:21:42:6f:e4:55:e2:ca:15:
d1:cc:15:d7:59:f9:99:e4:4c:58:63:68:ec:4d:26:
51:a7:da:19:a4:96:b9:44:79:2a:b6:6b:3a:19:76:
60:92:85:ce:91:55:f3:c3:b8:fd:43:fa:e6:d2:2f:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:22:23:65:1B:46:05:9A:98:29:52:06:A0:EA:8F:30:E8:F7:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/954ea63b-7599-3c9d-b486-ea5d32872d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.238.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:55:5c:ee:7e:ea:0b:9a:f2:9f:2d:ac:f8:92:b3:bd:1d:11:
37:50:65:cf:2e:c3:35:38:26:38:aa:cc:5e:c5:2c:43:74:30:
fb:07:3f:66:bb:36:6d:cc:85:a2:4a:7a:07:24:22:ed:91:1f:
1b:d4:77:62:ed:d5:2c:88:21:8a:b0:2a:6b:a8:ae:63:de:69:
fc:29:5e:40:55:70:75:74:ae:d9:bb:80:05:f6:43:38:7e:a0:
16:1d:31:f9:c7:64:32:e3:70:bf:12:e3:aa:f0:89:b1:ed:6f:
42:5c:3b:7e:54:0b:10:f6:6d:59:4c:d2:c1:4f:95:9a:2f:6f:
2f:9e:31:2b:35:8d:3c:a6:90:a8:45:2b:07:b5:cc:a5:fb:ee:
dd:37:92:3d:40:08:e7:86:5a:18:86:2f:72:ad:fe:c5:1e:84:
dd:0a:8c:c3:09:63:87:39:d1:fd:f8:da:66:40:47:07:55:82:
c4:31:71:ba:68:61:30:3f:10:2b:3b:bd:b6:39:3a:02:e4:79:
ca:ea:0b:4f:d6:56:82:98:84:93:af:08:75:f1:2c:32:ac:5c:
b6:3a:01:bc:c9:ff:20:67:d4:a6:a7:86:fe:ee:23:2d:c4:64:
85:f3:40:64:bd:23:8e:6f:94:7c:85:d0:0e:bd:d1:82:b3:36:
2f:8d:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:25 2025 by rpki-client