Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973a4325-529c-3e39-8648-8a820f68150a.roa
File: 973a4325-529c-3e39-8648-8a820f68150a.roa (raw, json)
Hash identifier: taDRsgWb4RYzLz0iKzgV4oWNUbD7NPF65TjDo57Pv/0=
Subject key identifier: 3B:D7:F2:19:D2:3A:9A:C2:17:2A:6B:DC:ED:92:14:5D:8C:BE:91:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584093139A9B373FB3D30C280260
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973a4325-529c-3e39-8648-8a820f68150a.roa
Signing time: Fri 13 Jan 2023 12:00:00 +0000
ROA not before: Fri 13 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 70.236.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:93:13:9a:9b:37:3f:b3:d3:0c:28:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 13 12:00:00 2023 GMT
Not After : Feb 18 05:00:00 2023 GMT
Subject: CN=65782cd7-a89d-43df-ae93-6815d8287b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:f7:bd:99:3b:61:9c:50:90:c3:b3:f4:72:
b3:8b:c3:73:45:b9:f3:30:97:79:ac:e4:07:36:43:
49:5d:23:e9:e8:fa:27:92:8e:34:ce:3c:e2:e3:d8:
2a:8b:eb:59:36:b4:27:cf:8e:62:ac:8e:54:f6:6d:
14:42:cb:8a:2e:77:65:6d:2e:a1:98:ea:3b:cd:92:
76:d2:ba:55:00:1e:1d:49:ba:de:ed:04:37:d7:b6:
25:e6:12:b6:6d:13:1a:5a:ee:fc:50:23:8a:42:dd:
b5:b3:79:c0:f7:c2:0a:b3:19:67:21:9d:02:be:5d:
ca:87:27:05:4b:f6:d8:4c:12:31:b9:f7:eb:4a:b6:
41:50:06:1f:72:dd:36:a7:ef:3a:f7:b7:c8:e4:f4:
a5:82:f7:63:65:40:1a:9b:d9:7c:03:06:10:85:d1:
cf:b6:a3:88:f6:3c:fe:4e:66:40:81:a8:00:9a:f4:
1d:7c:81:86:ba:b5:6b:8e:96:de:ff:de:fb:49:d3:
f2:f8:32:9e:a8:7a:6f:0f:f4:ee:06:fd:79:e2:f0:
23:8b:a0:9f:03:02:ef:5d:be:c4:4a:06:62:28:12:
38:ec:bf:90:8f:62:5e:cf:b5:b8:50:ad:3a:86:58:
21:fb:ab:4b:e4:20:66:de:22:80:05:08:00:27:26:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:F2:19:D2:3A:9A:C2:17:2A:6B:DC:ED:92:14:5D:8C:BE:91:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/973a4325-529c-3e39-8648-8a820f68150a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.236.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:a9:4a:b1:20:83:03:4b:49:6f:57:25:54:04:a6:e6:a4:2e:
36:ba:48:75:93:ce:0e:12:c1:e8:f3:c7:a8:24:3f:ca:52:01:
00:89:c3:2e:62:a5:22:93:c0:8a:8b:d0:bd:fa:21:99:89:5e:
1e:6f:9b:1e:6e:04:98:9d:62:5f:ca:b0:b7:27:77:72:de:ba:
b5:d0:19:72:aa:c3:1d:46:19:41:16:54:98:66:7d:7c:96:24:
28:bc:d4:b2:1f:cc:f4:23:b8:8c:94:4f:88:c5:a8:88:98:c4:
99:85:60:30:2f:ec:6c:ae:7c:df:7c:b2:71:47:7d:66:86:79:
e7:7c:50:9a:ab:9b:1c:4b:1e:39:f3:89:e9:98:20:90:f2:1e:
5c:91:a6:a0:b1:89:44:35:83:9a:20:09:c9:fa:bb:0d:6d:05:
b9:12:77:b4:43:83:ff:97:ec:7a:84:23:18:bc:cd:61:d2:a0:
1c:60:aa:39:eb:0f:c6:84:07:cc:6c:fb:94:90:fe:d7:39:54:
0b:8b:aa:56:e2:15:8d:d8:a2:f7:20:39:e7:66:a8:bf:46:6e:
ba:d0:33:a6:9b:76:8e:dd:88:3b:6a:e0:c3:b4:70:00:c1:84:
5e:4a:8c:83:7f:45:1a:6a:70:ca:46:7b:31:8d:f3:bb:c8:75:
92:91:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:12 2025 by rpki-client