Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc61fd9e-d406-3ae5-a705-020da9b2e41a.roa
File: bc61fd9e-d406-3ae5-a705-020da9b2e41a.roa (raw, json)
Hash identifier: tu9Nkrv2OiBTwI3yfPAjxCW5NM6bmpuU51HmBpYMlWA=
Subject key identifier: B4:48:F1:FF:97:17:74:90:A3:2B:41:83:89:48:76:8F:11:65:6E:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F0ACF398F0F4D7A53FF2A4800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc61fd9e-d406-3ae5-a705-020da9b2e41a.roa
Signing time: Fri 26 Aug 2022 17:36:07 +0000
ROA not before: Fri 26 Aug 2022 17:36:07 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0a:cf:39:8f:0f:4d:7a:53:ff:2a:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 26 17:36:07 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=f411cd2b-c62b-4288-b866-0ade1fcf245d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:c5:1d:eb:9f:60:76:d6:03:f7:2f:78:9c:
43:28:0a:75:2e:6a:4d:c4:9f:cd:88:99:dd:f8:0e:
5e:0f:46:f1:8d:3a:fa:5a:21:e9:40:36:07:76:0d:
71:a9:9c:04:09:c1:0c:4c:b3:8a:5b:40:52:4f:cc:
c1:47:d3:a9:2e:fb:1d:01:6b:fb:5d:40:e2:cd:f3:
e6:d2:50:ce:88:9d:48:e2:e3:04:58:bd:ca:dc:7f:
cb:f7:f2:f4:63:7f:24:bd:76:08:bb:50:d9:25:60:
34:6e:56:49:57:8e:b9:74:60:9e:e1:25:00:f1:7d:
5e:fb:b5:f1:39:70:9b:57:77:15:97:0b:be:23:8e:
0f:e9:e3:4d:0b:60:b2:6a:cb:d2:cd:93:13:88:2b:
d6:04:b9:88:8f:f5:51:e0:34:bf:87:57:ee:1f:59:
84:da:b4:fa:c4:79:01:43:e0:c1:18:2e:e0:65:f4:
0c:65:e0:7a:33:c3:76:e7:5f:26:92:86:c9:49:55:
ea:74:0e:cf:b1:b9:40:f6:07:53:89:bb:35:09:2c:
60:56:c4:f4:bc:65:df:4e:4c:14:e1:cf:09:4d:58:
da:61:b6:31:c2:97:33:04:69:70:9a:a0:e2:61:5a:
31:1a:4c:47:46:47:66:93:93:3c:b8:21:97:21:fa:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:F1:FF:97:17:74:90:A3:2B:41:83:89:48:76:8F:11:65:6E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc61fd9e-d406-3ae5-a705-020da9b2e41a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:48:d1:03:30:5c:8e:48:2b:0b:09:fe:c8:38:66:4c:f5:dd:
82:36:3c:2e:31:2a:d6:6f:0b:55:c4:83:76:43:07:8c:bb:1b:
20:58:22:04:91:b7:d8:26:81:7b:15:ab:c5:88:f0:c3:20:3d:
f1:c6:cc:5b:cd:e1:b0:ac:14:3d:b1:e9:a7:b8:d6:b0:37:6a:
d9:80:d4:70:26:64:0f:06:58:da:f9:1f:8f:d7:ff:dc:a5:d2:
7f:a2:3d:f0:3b:fd:ae:28:f4:8f:78:0d:e2:09:62:ea:98:9b:
c0:26:0a:6c:46:09:c4:af:e9:6b:46:3e:6d:2f:d2:02:97:fe:
59:f4:db:03:3e:0f:c0:a8:28:76:b5:a4:7c:cc:6f:45:97:99:
f0:e9:c5:f2:15:8b:0a:f3:6d:fb:86:15:45:e7:2c:a1:2a:8c:
93:c5:4d:70:62:2c:d7:77:fb:ad:96:d9:e0:65:52:7c:47:3e:
dd:f9:73:a0:bb:c9:31:9b:f6:81:ec:a5:f9:26:64:e7:27:0c:
80:eb:e3:19:f3:e0:ec:ae:cc:d7:98:a7:7e:3a:3a:73:84:92:
a8:8b:b0:64:cf:84:e6:35:cd:ba:9f:ed:10:1b:69:61:fd:44:
e0:c5:14:25:e1:b1:09:81:67:66:f9:d9:d3:16:18:35:87:18:
54:74:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:16 2025 by rpki-client