Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad5970b6-5c99-3bb0-a56f-cae1be156f6d.roa
File: ad5970b6-5c99-3bb0-a56f-cae1be156f6d.roa (raw, json)
Hash identifier: nCVcv8U+i6ghz1r5Dbx2xWXZkLoR161btG4fwVAcieQ=
Subject key identifier: 4F:57:20:49:7A:0A:94:E6:A4:AC:E9:60:7E:F6:F0:43:6B:26:C6:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401C058624EC2BF796C38AF200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad5970b6-5c99-3bb0-a56f-cae1be156f6d.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 71.145.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:05:86:24:ec:2b:f7:96:c3:8a:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=a34d6d01-03aa-42ab-88a2-7d1012bfa50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:28:97:26:d4:e4:fc:cd:a1:dc:6f:4a:b2:68:
86:c3:e2:b4:7c:8e:32:2e:be:f2:60:a0:7a:7a:85:
2e:83:dc:be:48:ee:db:9f:74:b4:6e:ef:89:5a:4f:
ba:fd:30:37:22:f4:fe:67:bd:20:b4:bf:8b:9a:fc:
bf:4e:95:59:5c:dc:45:fc:d5:63:8d:b9:db:d2:af:
3c:73:9a:11:e1:3d:80:d5:c0:8f:43:6e:02:96:31:
14:52:18:17:8a:e4:02:fd:06:75:b4:31:ce:e2:7c:
78:73:a4:74:6e:4f:d1:56:b0:69:ed:f6:94:e9:78:
40:66:12:69:10:06:79:b7:de:fc:e9:ce:9f:e9:ea:
ab:2f:ad:0b:9d:fd:f4:ba:4a:a3:ce:6a:50:79:f8:
43:94:05:10:42:b9:a5:a4:4a:10:d0:2f:db:f4:12:
44:83:89:1c:bd:a9:4f:db:4b:57:93:df:2b:be:52:
74:04:57:e9:ab:a6:92:7b:c9:bd:3e:0b:35:bc:39:
4f:1b:36:29:a0:f8:f8:52:78:67:24:bc:86:16:96:
8d:42:68:ce:e5:15:bf:e9:47:67:86:03:33:1a:0e:
fe:ca:b1:c9:7f:2b:f1:b6:d7:7d:5c:7e:18:0a:63:
cb:02:1e:29:b7:81:54:35:b9:cc:49:6d:6c:6a:e3:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:20:49:7A:0A:94:E6:A4:AC:E9:60:7E:F6:F0:43:6B:26:C6:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad5970b6-5c99-3bb0-a56f-cae1be156f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.145.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:19:e9:22:a1:be:c9:d0:1d:11:d0:ec:17:48:b4:a2:68:18:
80:13:05:ce:e2:b5:0b:fa:b9:59:7a:1d:d4:0c:4e:9d:e1:13:
c3:26:e2:c2:16:ef:1e:e3:53:fe:e9:0f:9b:b6:91:67:c2:65:
c4:b3:9a:98:50:28:16:08:5f:00:71:69:18:04:8d:cd:f7:f5:
fb:49:51:22:25:7a:c5:36:1d:f0:30:10:9c:90:ba:de:04:68:
c3:8c:de:b7:78:af:a5:a9:20:69:38:5c:29:ef:29:19:7c:3d:
13:20:a1:09:3d:44:2a:2d:60:da:eb:fd:b2:67:86:8a:06:0b:
0e:46:1a:1a:b8:92:61:d5:7c:68:a7:fa:4e:2e:ff:7e:54:df:
63:29:ba:ac:96:07:d3:61:36:bd:04:07:e2:88:e0:99:0f:1a:
44:10:b8:59:cb:fe:87:f9:7d:0b:39:81:1b:7a:c4:3a:b6:f7:
15:4d:47:ee:70:5a:03:6a:10:2e:ee:34:96:bb:2a:14:90:e0:
9b:3f:76:1e:4c:ba:76:bf:fb:ab:77:0e:c5:13:f6:cf:4f:c2:
d2:98:2f:a0:f9:6a:9d:21:cc:a6:b6:19:56:6f:1c:c2:1c:9d:
1e:d5:9c:62:22:25:79:f6:45:79:54:c9:98:9f:c6:18:f0:ba:
e8:25:04:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:16 2025 by rpki-client