Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968e22a6-09f3-37cd-ad31-d3a1ce874010.roa
File: 968e22a6-09f3-37cd-ad31-d3a1ce874010.roa (raw, json)
Hash identifier: omcNLHoGNQ0tQ28ZLTZsUp/BEdK2H4aAr9BC16dnIq4=
Subject key identifier: E2:74:8E:37:DA:4F:26:3B:4C:1A:14:AA:A8:99:C6:67:4B:D9:A7:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF67C6FB77F5F4ACF5C2DB780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968e22a6-09f3-37cd-ad31-d3a1ce874010.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f6:7c:6f:b7:7f:5f:4a:cf:5c:2d:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=9f6f4dff-de1f-46c5-af55-56360868c1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:91:3e:ea:eb:ec:15:ac:3c:ae:c7:4f:f2:
0f:e0:3d:bf:54:aa:17:84:2b:f9:9a:0d:2d:18:48:
4d:db:4d:41:46:78:7f:2f:aa:b5:53:61:e3:ee:2e:
fa:21:cc:3c:b6:12:c2:33:18:61:63:68:29:0c:3c:
60:d7:1a:e6:81:72:16:a8:0b:9e:73:83:5e:54:b3:
9b:60:33:80:ca:9f:0b:12:4f:ce:b3:ac:40:ac:35:
d4:b6:9f:37:56:2e:f2:a6:33:69:2b:05:01:54:bf:
e3:94:4f:5f:6a:67:f5:26:bb:2c:95:cc:6d:c1:8a:
89:ae:6f:98:27:7e:97:ba:0b:e7:95:d0:66:d6:3e:
71:c9:ee:ce:56:80:25:c0:d6:52:d0:52:90:4c:59:
c2:f8:03:cc:f9:4c:99:63:75:c9:b7:7e:ec:04:ef:
f1:fa:c4:16:98:a3:9f:c6:d2:bf:d6:5b:86:80:fd:
0f:1a:a0:27:65:ea:bc:2e:1e:78:bf:8e:f2:a7:cc:
11:9f:55:7b:96:b2:cd:a3:c0:e0:f7:f8:68:90:88:
4b:51:e3:57:d4:8e:e9:2f:99:93:01:7e:57:bb:25:
75:12:32:da:41:8f:64:26:b0:e6:9d:23:30:0d:2b:
52:fc:aa:47:45:c1:68:3f:a4:3c:20:70:25:95:63:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:74:8E:37:DA:4F:26:3B:4C:1A:14:AA:A8:99:C6:67:4B:D9:A7:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968e22a6-09f3-37cd-ad31-d3a1ce874010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:5d:a0:16:82:9c:7e:4c:5e:64:d3:35:5f:e0:05:a1:1a:35:
30:40:d1:4f:7f:4e:17:36:8c:6d:d3:86:dd:fe:05:fe:c2:1a:
32:dc:39:d3:5d:86:0b:70:e6:10:78:ed:0d:ea:a7:40:ae:5e:
3e:ff:6b:bd:d5:c5:38:1e:b8:46:39:7d:90:cd:ce:0b:15:aa:
af:9e:b1:c3:4d:1b:fa:ea:74:b9:68:f9:f9:0c:6a:73:af:45:
48:d8:43:19:ee:ee:92:13:ab:68:72:ae:3d:62:4b:de:94:4e:
39:b8:b9:d7:ff:ae:96:cc:59:26:ce:d0:59:6e:6f:e0:7c:36:
eb:b8:b6:fe:90:73:3f:d0:06:07:1e:fa:c7:a4:6a:d6:73:12:
90:f8:02:d5:1d:7a:9f:4e:e2:49:90:ca:a2:35:77:32:48:54:
7f:ee:b8:df:69:01:e3:0d:bc:f3:92:97:46:89:f0:ce:da:9b:
4f:fe:23:ab:a1:65:cf:47:c9:ff:b9:b9:6b:fa:f5:12:9e:10:
d7:34:4a:0f:91:f4:42:da:42:f2:9e:29:aa:bd:fe:ef:60:81:
f9:32:f3:ef:b3:74:ef:c5:49:6a:3c:28:ad:5d:d1:f2:68:98:
27:ed:ba:db:3b:b0:00:36:f0:2e:fc:62:03:05:24:f1:29:71:
e5:a4:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:04:57 2025 by rpki-client