Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b949729f-5d40-303b-a8af-c0b101052932.roa
File: b949729f-5d40-303b-a8af-c0b101052932.roa (raw, json)
Hash identifier: 1/yglPsxvqkBRgSpVLINbjKkHAmIlWyy1AmA/pN3wfs=
Subject key identifier: 04:70:43:E9:D0:A2:7D:8C:79:E9:E6:58:17:5D:36:6E:04:EE:A1:73
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584044C339F6EEB1F34C65678E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b949729f-5d40-303b-a8af-c0b101052932.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 64.252.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:c3:39:f6:ee:b1:f3:4c:65:67:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=adb339d1-3675-44f9-805d-09d6e8dea664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:eb:f1:6d:81:a2:7e:ef:f8:76:4a:43:c2:
21:23:ec:68:35:7b:dd:c4:1c:9c:70:6a:99:45:76:
c8:da:18:dd:42:56:33:3b:98:c2:5f:8d:39:5a:95:
07:bc:39:9a:23:c0:43:88:3f:cc:2f:be:e8:9a:6d:
9c:a3:27:64:65:33:d0:ad:b1:8b:06:30:8a:e8:25:
4f:2a:51:ff:67:c1:ba:2c:d1:c0:53:f7:4d:08:51:
43:98:2c:e0:6d:89:8f:6f:6a:4c:0d:bf:09:6d:d1:
c7:73:e9:08:20:68:98:ce:d8:8c:ad:77:00:fd:00:
86:98:f4:2c:54:28:9f:ad:3f:a7:bd:22:74:ba:1e:
f6:c1:90:ae:b2:24:75:93:4f:4c:e5:5b:58:3f:c0:
a6:67:78:e3:9b:74:e4:53:e5:32:0a:c8:be:a4:97:
b4:de:3d:b9:a3:f3:29:bb:6b:5a:2a:ff:2d:dc:0c:
1f:1d:c7:1c:81:44:b5:4e:56:98:42:ee:03:39:10:
b5:13:26:73:33:a0:2f:1e:a3:0c:56:eb:2b:78:c8:
b8:33:04:00:bf:51:3e:10:b3:e4:5b:33:93:78:e2:
1e:26:fe:e2:c4:e6:99:da:73:94:95:11:5d:37:80:
3d:8a:a0:14:86:ba:49:5b:f6:ad:0f:3f:ad:4c:5b:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:70:43:E9:D0:A2:7D:8C:79:E9:E6:58:17:5D:36:6E:04:EE:A1:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b949729f-5d40-303b-a8af-c0b101052932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.252.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:9a:95:b3:56:34:4b:13:bc:8a:aa:51:f2:71:76:13:b3:30:
77:fc:60:c0:71:2b:2b:d4:40:1e:a5:c9:6a:aa:f6:a6:20:5d:
e4:a1:24:72:9a:86:ca:2f:ce:bf:f1:e2:60:6f:99:ed:26:62:
7e:4e:2e:f8:c2:de:94:42:26:7e:53:8c:2c:6a:64:ed:50:51:
c8:8c:7f:e1:73:51:7b:f8:17:10:e7:33:19:dc:74:d8:da:5f:
d4:a3:d8:0e:28:d0:63:cd:e6:0d:7f:cb:03:ab:d0:3d:3e:8a:
f7:05:5a:84:65:a3:5f:c2:00:4f:c9:96:ab:5a:50:43:2e:4e:
f0:ca:0e:7d:37:6b:fc:f4:65:43:32:11:12:91:d2:74:75:5d:
07:e5:da:e5:19:90:82:96:18:64:81:31:90:36:f1:27:9d:97:
58:a3:d4:ee:e6:e0:8e:82:e2:53:27:45:a1:17:5e:e9:cc:e4:
e1:74:98:d7:58:12:c1:65:c2:1f:1b:62:c0:23:c9:cc:8a:4d:
5e:f3:67:04:85:bf:91:f0:4c:9b:57:93:08:84:3b:22:e6:c3:
f9:91:09:01:42:b3:b4:ad:e2:82:d1:04:a7:fd:be:c1:c4:5a:
cd:d9:cc:bd:30:a2:e6:20:17:40:7f:b6:ad:76:f0:ca:a6:bf:
d9:1c:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:38 2025 by rpki-client