Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a135335b-537b-3ce6-8066-cb2fbbe03425.roa
File: a135335b-537b-3ce6-8066-cb2fbbe03425.roa (raw, json)
Hash identifier: WjEcf4pMERCjAKu4B8g2i13/hzCb3iZ7j1NcbrwQ6lg=
Subject key identifier: 91:2A:3F:EE:2D:37:D5:2F:BF:A7:CB:AB:82:2D:2D:76:0F:09:B8:EE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D814347A10476DB236AEA6400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a135335b-537b-3ce6-8066-cb2fbbe03425.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 76.205.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:43:47:a1:04:76:db:23:6a:ea:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=a809c893-2963-4530-a0f8-03f49bdb82c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:18:7f:10:c1:a0:8d:e9:af:d2:6f:45:17:
9d:12:17:dc:a4:11:cb:7e:7b:fe:77:ce:b4:76:1a:
bc:f9:8f:a4:2c:26:01:2e:04:25:a3:4a:90:b4:f3:
b7:d8:0f:c9:42:0d:ff:2a:df:97:81:28:06:0f:12:
f0:53:d0:ae:9c:ba:e4:0e:f5:72:e2:1a:c1:4f:ec:
83:dc:8c:69:2c:2b:58:80:3c:20:39:23:02:a6:df:
c1:44:8b:c9:0e:6a:22:ba:bd:9a:97:06:69:9e:0e:
fa:21:4b:21:20:b5:96:53:7b:1a:31:41:30:d9:4f:
44:59:9a:34:c8:dd:fe:78:16:1e:f0:37:7c:63:2e:
e8:c4:ba:ad:b4:35:3f:05:a5:76:30:de:d3:11:e7:
e8:ef:1a:8c:65:98:90:ce:78:40:d9:f8:08:1f:c8:
ac:c6:b3:44:2c:78:40:a5:60:85:80:81:71:ae:4f:
a4:84:70:68:55:4a:bb:d9:69:5e:4e:58:08:4c:38:
f4:83:b6:8a:20:b4:55:06:d0:f3:36:17:f1:3b:22:
4c:07:15:d0:67:87:07:01:18:f8:c7:98:ac:43:71:
96:31:fb:2b:0b:85:8a:ea:86:0d:6f:51:c1:cf:3c:
f6:40:2c:32:36:24:e8:b6:53:d5:de:af:2e:ae:13:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:3F:EE:2D:37:D5:2F:BF:A7:CB:AB:82:2D:2D:76:0F:09:B8:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a135335b-537b-3ce6-8066-cb2fbbe03425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.205.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:ff:38:19:74:cd:f6:d3:d2:d4:03:0c:9a:ae:9f:c0:24:b2:
d6:7c:53:0c:92:0d:c1:7f:79:e0:04:22:b5:c6:0a:e8:b9:ad:
1d:83:1a:88:62:d1:38:45:d2:68:f3:b2:d4:a3:a3:69:ed:32:
67:18:21:84:07:2d:d1:77:f1:c3:4d:88:5b:11:51:62:df:af:
cd:2a:af:87:0d:3b:5d:37:9f:00:2b:c6:b9:e1:ad:53:6a:ee:
92:7e:58:f7:36:27:e6:9c:fd:a0:4d:7e:cd:aa:d0:ba:bf:81:
f4:9e:d9:1e:90:1e:be:88:6f:c2:a8:0e:d7:2a:31:c8:79:51:
fd:a4:84:c2:ab:fe:60:40:ae:c9:bd:68:2a:49:3e:59:58:b8:
b6:f0:b0:75:e0:5a:7a:7b:52:b4:4e:79:eb:e7:4f:f0:49:10:
f2:ae:8b:39:1f:5d:7f:01:e2:c0:dd:a1:c0:a0:27:10:f1:b6:
9b:85:b8:35:47:ac:21:9c:b3:a0:68:af:3a:9d:01:4f:0f:3f:
b1:96:4d:52:46:61:51:ec:62:44:80:3e:02:93:87:42:a5:2f:
c0:9b:38:59:ad:b6:dc:87:41:5d:80:dc:2b:95:f4:13:76:29:
8b:8f:d6:a7:6d:98:ad:9d:cd:95:c2:e0:a5:7c:e2:72:28:50:
f1:88:bd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:53 2025 by rpki-client