Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b20c010a-b94c-30f8-b3ba-9a84948fc004.roa
File: b20c010a-b94c-30f8-b3ba-9a84948fc004.roa (raw, json)
Hash identifier: /2mYW/YBkpayAhHf4P3Zw1EuVSqf8X0nUU8skm8SdDM=
Subject key identifier: 80:AC:60:16:A1:6A:D0:65:39:06:00:42:48:8D:25:3A:63:1A:51:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0BE51815079C818848473700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b20c010a-b94c-30f8-b3ba-9a84948fc004.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 75.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:e5:18:15:07:9c:81:88:48:47:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=d249ce3a-5d84-4ea8-aa05-54a21201a854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:c2:6b:3a:f1:c6:6c:ad:6c:92:12:06:0d:
e4:e0:c5:e6:33:52:61:16:dd:bb:4e:7c:da:4b:79:
6a:2a:f0:17:fd:5d:8f:05:39:6d:35:d8:67:8f:cd:
e4:77:93:20:1a:74:52:43:cb:b6:75:d7:8c:5e:7c:
6e:37:05:ca:f7:91:6f:92:5c:2e:d1:fd:bc:7d:47:
d7:83:0d:64:7b:83:cb:d7:dd:5b:dd:3a:ea:74:7f:
18:fb:23:09:9f:09:e5:a8:f1:44:05:3a:51:2a:e5:
92:52:8e:b4:7e:6f:74:cf:9b:a4:9d:2e:76:b5:c4:
b0:a7:89:d8:05:7f:8e:db:cc:ac:56:34:2d:03:51:
aa:8c:77:dd:67:10:cc:aa:98:7c:59:82:2b:db:17:
ea:23:29:38:69:75:86:5d:62:27:38:08:c3:21:df:
2b:74:52:71:47:66:dc:37:10:97:0a:19:3b:5b:69:
ee:e3:72:7e:5c:cd:7f:10:f1:a3:8f:c5:44:ec:65:
71:ff:63:3d:5c:13:d3:5c:ea:01:ae:b8:fc:b1:92:
68:04:2d:28:a1:ec:02:e1:de:47:60:63:0e:22:fa:
01:df:ec:06:14:90:d0:d9:db:13:f6:57:71:09:cb:
28:93:3c:3a:1f:b1:eb:43:71:80:4d:5a:fc:5d:6f:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:60:16:A1:6A:D0:65:39:06:00:42:48:8D:25:3A:63:1A:51:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b20c010a-b94c-30f8-b3ba-9a84948fc004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.79.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d3:34:20:08:d3:89:e8:84:b6:35:a2:18:39:03:a1:3b:b5:
a3:5f:0c:eb:46:25:be:f0:32:9c:cb:50:d5:bb:25:91:58:4d:
6f:3d:45:c6:c3:18:14:15:56:da:bb:9e:23:bc:20:fa:57:08:
d9:3c:cb:00:5b:48:3f:7b:54:8d:d7:47:3a:3e:0c:36:6c:90:
b8:b4:62:11:e9:c3:09:f9:77:a7:f3:11:bf:6f:97:d7:64:28:
6e:8d:32:04:d2:e3:c7:4e:a0:cd:41:63:84:ec:c0:3a:c7:cd:
7f:da:4d:46:b7:12:9a:c5:d3:29:cb:74:c4:a9:56:78:cf:a4:
2a:1c:8e:af:bb:a1:4c:2a:d6:a4:d6:08:5c:3f:33:89:15:b1:
2b:f0:3e:c5:88:4c:e8:7e:03:d5:fa:bd:56:e0:53:8b:28:10:
5b:26:d6:6c:6a:b4:15:f8:1a:0d:60:20:75:77:d9:b0:e6:e9:
c0:11:9b:af:0c:9c:ef:2d:79:1d:7a:42:71:f9:b3:74:36:87:
16:2a:d8:e8:72:d7:9f:eb:72:a9:98:a1:44:47:64:b1:cd:ed:
09:6f:70:0e:4c:17:ae:e0:9d:f0:bb:6d:c2:64:7e:3a:1a:8f:
4b:1f:93:f8:d9:c0:3e:42:78:f3:24:45:ea:6e:bd:b7:a4:99:
58:33:a5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:10:32 2025 by rpki-client