Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b96f9e16-b45a-3a84-a45c-cafbd59cdef5.roa
File: b96f9e16-b45a-3a84-a45c-cafbd59cdef5.roa (raw, json)
Hash identifier: KtGwj5pAj26FuRzj17WhHN0MzTIx5VN7tY/qi7HMOUg=
Subject key identifier: BC:96:20:90:03:32:4C:45:B0:C8:08:AA:2F:AE:6D:0D:E9:45:EB:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584043CD8AC8D40491BD5FE5DB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b96f9e16-b45a-3a84-a45c-cafbd59cdef5.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 71.143.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:cd:8a:c8:d4:04:91:bd:5f:e5:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=2c61f6a6-eb1e-4d6a-9fd8-b0d540001a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:ab:61:d3:7b:61:8e:e7:75:51:1f:0e:2a:
b5:91:5a:ce:b8:88:81:a5:5f:4d:eb:17:a8:0e:a1:
ec:35:51:e1:9c:fa:4b:69:71:1d:f7:6f:d9:76:31:
8f:d7:86:76:18:9d:99:76:88:35:64:55:c2:3a:1e:
ba:c9:76:6f:f4:ff:8e:e0:53:23:22:50:87:9f:0b:
33:32:22:d3:c9:3e:8d:c4:1d:10:30:72:bf:ae:87:
94:6d:0a:3d:f7:60:fc:cd:d3:b6:0f:b3:53:72:4b:
ca:59:2b:f6:92:fb:a1:fc:f6:8d:ad:f2:b0:39:ff:
cf:c3:2b:40:39:92:76:6c:42:8d:9e:51:cc:a0:b2:
3d:92:9a:51:17:fb:67:9b:d8:c7:54:7d:12:b1:74:
ef:b8:f9:c5:c5:97:01:ec:40:2f:2f:d8:30:5a:cb:
0e:f0:36:30:c6:0c:3a:f1:03:5c:8b:0e:59:c9:c7:
2d:e7:db:51:a2:dc:b8:0a:8f:20:84:04:0c:d0:7f:
6e:40:76:5e:5f:fb:f0:e0:da:ce:76:98:02:ae:9e:
a6:db:d5:11:ec:eb:de:a5:c0:72:48:b9:f6:34:3c:
91:dd:4b:9d:70:8e:82:08:64:7e:5d:e1:91:38:d9:
13:7a:5b:f2:5b:76:e9:e0:17:70:f0:05:c3:46:2f:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:20:90:03:32:4C:45:B0:C8:08:AA:2F:AE:6D:0D:E9:45:EB:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b96f9e16-b45a-3a84-a45c-cafbd59cdef5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.143.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:f6:96:34:71:60:7a:af:2f:ab:51:f6:85:24:29:8e:d7:7a:
19:ad:9a:cd:c2:f6:7a:60:14:85:04:8f:d0:6a:b8:a9:42:3f:
e6:e2:ca:bb:aa:02:88:e9:4c:4f:f4:fa:b5:43:1d:60:30:8c:
a3:f6:8d:2f:77:eb:f3:66:16:a0:ff:5d:49:97:94:f6:9b:06:
6b:c6:63:b2:0a:e5:75:58:d0:30:2f:a5:74:4f:cc:e1:33:e2:
d8:ce:27:8c:91:8c:3d:78:c9:ed:61:f5:fe:0b:34:98:70:11:
cb:25:a6:86:fa:64:71:4c:eb:49:c5:3a:8e:cd:0a:a4:ca:7f:
cc:ad:cf:d7:cf:1e:b8:02:1d:8b:fd:6f:0e:b4:ff:5b:c1:04:
43:c9:e6:e5:6f:59:32:e7:b0:56:d3:fd:7b:eb:59:4a:48:6a:
78:78:29:0d:64:8d:d8:99:18:ad:ab:bd:96:86:eb:0e:5f:e6:
11:19:f9:37:a9:ca:b6:3c:4d:5b:c9:93:7f:63:ba:8c:4d:f1:
50:51:ad:14:af:29:2d:73:1e:7c:f7:2e:5d:2f:c6:2d:71:46:
07:5f:73:c8:23:87:ff:45:97:cd:8a:ea:75:bf:b5:f6:d3:84:
98:76:40:ad:a9:9c:51:28:99:a5:27:57:ad:38:b4:7e:43:7c:
a6:cf:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:12 2025 by rpki-client