Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/967b8a63-3176-35a0-b841-2f9dad0e983e.roa
File: 967b8a63-3176-35a0-b841-2f9dad0e983e.roa (raw, json)
Hash identifier: w1gydJv68CqF/C48CgEGaNry58ZPis1hcPOF0nM1kYU=
Subject key identifier: F0:E4:4C:8A:0A:FA:72:5E:C4:2A:E3:33:B4:7D:D8:DD:05:41:54:2D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C96954EC6A6A5F88B09F25700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/967b8a63-3176-35a0-b841-2f9dad0e983e.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 76.223.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:95:4e:c6:a6:a5:f8:8b:09:f2:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=4afcf8bc-6705-4cf7-a35b-da7641f9457c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:02:7e:89:3c:22:7f:99:86:e6:16:d5:00:3f:
ec:94:e0:45:07:cd:10:ff:a1:fe:98:0b:23:99:f5:
fd:a5:bf:8b:8f:98:4f:34:6f:02:a7:14:fa:54:c4:
9e:b8:71:9b:cb:62:61:15:ba:89:e5:d5:9d:8c:78:
84:8a:9c:b0:9e:b1:c0:14:ef:e0:09:76:ff:43:ac:
fa:b4:a7:55:e8:fa:5e:21:8c:d9:2a:00:1e:b4:f6:
8b:41:35:2a:a8:51:28:9c:c3:4a:e6:9f:21:20:ec:
92:93:8d:7c:a4:1c:5f:38:ee:e1:c7:6e:ef:91:85:
cc:a7:a1:62:7d:7e:49:33:5d:6d:e1:11:35:fc:21:
76:f1:da:bf:15:32:14:81:d4:45:4b:6c:ba:2c:ad:
85:af:07:2e:94:55:7b:b5:0d:11:03:20:28:28:c8:
6e:9b:73:61:e3:3c:f4:c3:b7:8c:05:62:d2:eb:b3:
7e:24:f0:d7:ec:c4:13:a3:36:6b:e2:4f:d5:94:57:
70:b9:fe:50:8f:b3:71:c6:0d:1e:90:0c:00:e5:d7:
d6:3b:86:6c:38:bd:10:55:d5:81:df:f5:79:74:81:
dd:1d:33:56:2b:e6:33:39:c2:41:3d:e0:45:5b:8e:
e6:8c:e0:e8:e6:6f:b3:73:ac:ba:a7:06:b3:8d:9a:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E4:4C:8A:0A:FA:72:5E:C4:2A:E3:33:B4:7D:D8:DD:05:41:54:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/967b8a63-3176-35a0-b841-2f9dad0e983e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:06:48:1a:a7:33:21:86:e0:97:75:78:5f:8d:93:22:94:30:
24:f5:c6:6e:ed:07:3a:c6:1c:b6:ba:46:75:a9:5a:aa:a7:b1:
b4:93:d9:0f:6e:f1:79:b6:ae:fb:ed:f6:0d:5a:b5:3b:e1:9c:
8b:cb:d8:3c:09:c3:5e:81:60:9f:84:19:fa:4a:af:f9:72:38:
b8:f8:d3:9f:15:f1:bb:fb:38:ac:5c:ad:df:a4:52:e1:91:9d:
7a:8b:01:cc:2b:e7:f4:43:ac:1f:11:f5:53:55:81:a0:40:ec:
22:68:1f:12:f1:c3:9b:43:d7:2c:15:fc:ac:d2:22:09:b6:52:
07:fd:70:ce:80:fd:42:a5:e2:a0:59:04:b7:5e:55:6a:c7:a3:
77:4f:ca:66:09:d8:13:d7:4c:fc:40:05:05:51:89:dd:69:7c:
e5:4f:2c:87:c0:83:4d:5c:36:a1:d6:29:d3:0d:5b:fa:94:7e:
3e:f1:3a:40:40:fd:42:fb:6c:55:f0:a3:6d:53:86:07:ce:0a:
9a:fd:b5:c3:01:c0:75:47:73:f1:ce:08:74:e2:f9:12:cb:eb:
3c:c4:46:55:e1:38:be:04:ec:53:17:13:7f:e4:c0:ff:a7:a6:
89:06:62:d6:5d:85:b8:b2:d6:a4:d1:ff:2c:5b:f4:4f:21:67:
c3:3e:60:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:31 2025 by rpki-client