Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d461e96-742e-3cf5-acb4-192a6b724c28.roa
File: 9d461e96-742e-3cf5-acb4-192a6b724c28.roa (raw, json)
Hash identifier: Cb2gi+V2tKX3C44804tEuRGYv8ZyzSv9tDQbiXEgDSE=
Subject key identifier: F5:3A:61:85:E3:56:E8:A0:32:B9:39:96:A3:BC:7E:05:FB:9B:C1:BE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6E1084B32819179958EACA40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d461e96-742e-3cf5-acb4-192a6b724c28.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 107.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:10:84:b3:28:19:17:99:58:ea:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=f054c7cb-777a-4974-be80-80318856e8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:d1:3c:a9:ab:3a:89:e9:15:47:c2:ae:25:
42:ac:93:fe:50:14:72:9f:ff:98:bb:7b:4a:b7:d3:
c3:8e:b4:b1:e1:c3:99:76:f5:89:e3:40:1c:6a:4e:
b6:dd:28:8c:d5:48:57:50:57:60:6a:08:6a:77:8e:
00:1f:50:19:99:4e:5a:94:ee:66:99:bb:de:a1:b9:
85:9d:5d:71:d4:c0:9d:af:56:38:83:b7:c3:ba:ce:
8a:d1:8f:78:47:3d:64:28:0f:2d:87:f7:7f:b4:42:
71:de:6d:99:85:e5:96:c1:db:9b:79:57:a8:a8:15:
e1:4d:bf:39:7e:16:c1:5b:5e:c0:6e:e6:06:59:a3:
c4:0e:39:89:16:54:2e:b9:8f:b1:0d:eb:46:36:d4:
b6:94:87:aa:e0:f6:0e:71:4e:18:3a:b8:5f:3e:8b:
92:b5:f7:fc:51:99:6e:55:e8:d3:23:1f:09:ac:1a:
fd:e3:10:02:91:3e:56:81:c0:36:41:95:13:a3:72:
b2:6f:39:4f:db:6b:62:3b:25:0a:88:f6:b8:59:f0:
f8:07:d3:1f:4c:3d:04:77:43:85:27:42:7b:4d:ee:
22:dc:31:21:db:90:db:0c:06:ac:29:1d:78:9a:27:
b9:ef:f5:ae:9a:e4:47:1a:43:4b:94:87:6d:77:db:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:61:85:E3:56:E8:A0:32:B9:39:96:A3:BC:7E:05:FB:9B:C1:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d461e96-742e-3cf5-acb4-192a6b724c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.176.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:91:75:80:da:8c:f7:4c:1d:30:51:a7:0c:b5:1f:26:7c:2e:
87:2d:0d:fd:e7:80:8e:22:eb:88:77:fc:94:31:88:e3:53:d9:
14:b8:15:f7:c7:48:0d:46:47:f5:b4:a1:e0:73:06:1d:36:e0:
1f:58:a8:0d:46:89:a0:38:cd:1c:76:a6:3c:32:ce:43:4a:35:
50:f7:6d:d1:3c:25:d0:a8:70:89:d8:72:26:5f:c0:a3:38:62:
ee:59:7b:4e:a2:ac:ff:33:9e:5e:f0:71:da:03:38:62:82:d9:
30:89:3e:07:c3:ab:c0:0e:d3:5d:92:b2:d6:d7:b0:1d:bb:39:
5a:be:49:5d:71:59:5a:53:ee:16:53:8f:9c:d1:e2:dd:da:b5:
09:f0:df:22:91:f0:12:c7:ad:52:81:47:e9:f1:a4:9f:61:aa:
f3:74:e4:97:1e:f3:dc:c5:22:90:50:18:2b:7c:df:37:bb:e8:
58:a0:cb:40:a2:18:21:a8:c6:4d:7d:ad:de:a5:ff:80:cb:97:
d6:85:46:93:94:27:44:9d:bb:51:fe:fe:a5:d9:0c:e3:64:a4:
14:3e:51:f3:b5:a2:c3:ee:75:2f:71:50:43:72:ad:16:2a:45:
e5:0a:8a:c1:a7:4a:fc:93:da:03:a6:2a:26:ad:08:0d:6a:88:
e7:33:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:57 2025 by rpki-client