Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d044c0b-f498-324d-8f59-a0dfdbd3b7d5.roa
File: 9d044c0b-f498-324d-8f59-a0dfdbd3b7d5.roa (raw, json)
Hash identifier: kvVP7rl3ro/oR10jgWK+Xb4UiPSXm1LatO4zV9gv/LA=
Subject key identifier: D3:23:95:A5:36:C3:A8:10:F2:8C:E6:89:3C:4A:F7:CD:27:87:74:EE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E4797801424F753E5FFE6CF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d044c0b-f498-324d-8f59-a0dfdbd3b7d5.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 72.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:47:97:80:14:24:f7:53:e5:ff:e6:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=26ba349b-e6aa-4c0a-82c6-06f2dd2005d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:e4:1f:f8:e7:16:ed:ce:2b:df:cd:0a:bb:
cc:19:4b:a2:41:bb:0f:3c:5e:fc:75:2d:d9:54:fa:
1e:ca:b8:72:88:12:68:70:da:9a:14:9d:9a:be:8d:
1d:36:cb:ff:44:04:16:33:dc:d8:ce:b6:7f:97:7f:
c4:12:4d:e8:ac:2d:36:21:ec:50:4d:fe:50:70:96:
45:3d:76:71:79:e9:1f:06:c3:bd:93:72:79:eb:4c:
0c:06:1c:4e:8d:f0:f3:86:97:07:d5:1c:7c:99:d9:
9c:f4:4b:c2:01:e3:0a:8e:2e:83:a5:59:9d:96:16:
ec:57:42:bf:80:be:fd:e9:ee:5a:51:c9:6c:c0:d8:
60:b3:f1:63:3c:34:ef:eb:0f:34:3b:48:f3:49:5d:
65:27:bb:d3:4e:71:06:a0:51:f0:58:06:a1:b2:4b:
f6:19:c5:13:74:c3:4c:46:52:cc:f9:1b:03:9f:53:
e1:b1:12:d0:1e:2a:6d:f1:18:e5:c7:04:d7:c7:e8:
1c:b8:86:69:4f:68:e0:eb:78:5d:e0:a0:ce:4f:bf:
f8:6c:17:e1:91:44:b2:b1:61:84:3c:30:00:90:88:
4f:01:74:15:e2:8b:cb:94:e3:72:15:24:81:0a:c3:
3e:58:0a:a6:23:5e:7a:17:e6:1a:94:11:ca:c8:c3:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:23:95:A5:36:C3:A8:10:F2:8C:E6:89:3C:4A:F7:CD:27:87:74:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d044c0b-f498-324d-8f59-a0dfdbd3b7d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
72.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:fd:b7:54:3c:fc:70:af:6c:73:78:80:1d:48:4d:2f:97:bf:
11:15:1c:7e:c5:59:65:db:ab:3c:dd:97:77:c4:56:85:f9:c8:
6d:2c:0c:12:44:7c:2f:a2:b5:3a:d5:d3:d5:0e:c0:a8:d2:0c:
be:cd:f7:c0:92:0c:b6:38:c7:94:72:94:aa:93:fa:3b:87:c9:
43:12:45:ac:2c:07:25:65:d9:89:85:14:05:02:9d:81:ad:5c:
5e:c9:c1:8c:42:5a:7c:07:2d:ff:6e:32:db:c2:dd:c3:08:40:
60:58:10:55:db:9d:7c:14:34:1c:a1:51:3c:41:2a:a2:55:84:
f2:e7:50:b3:e5:04:27:d3:6e:52:c0:cf:78:93:75:0b:df:d5:
31:5c:26:a7:e3:0a:bb:8e:1a:96:7b:5e:fc:73:fc:09:2b:15:
95:6a:a5:15:ae:fc:bb:b6:c0:bf:e2:c3:9d:72:0a:74:5b:b4:
c9:f8:06:92:15:a5:f8:e3:9f:da:09:3d:7e:7a:cf:58:33:e7:
2b:e6:2b:fa:03:c5:db:39:44:1e:c1:9b:80:ee:2a:70:ae:14:
87:b3:b8:41:e6:cf:1a:43:a0:a3:93:11:fd:3d:8e:4e:09:4d:
0d:de:05:bb:2d:e4:75:29:63:bf:8c:67:7b:13:d1:2d:cd:84:
ce:06:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:19 2025 by rpki-client