Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be9006e1-dab0-398a-9656-56897c266232.roa
File: be9006e1-dab0-398a-9656-56897c266232.roa (raw, json)
Hash identifier: zcr9J7HWrklvp1BLhEluQmioUVHxqqPb9P8cM7zIMBI=
Subject key identifier: 65:25:00:FC:49:3F:CA:D3:6A:31:5A:60:0C:1D:7C:81:CC:79:32:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE4EDBFCDED1332440D5F9C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be9006e1-dab0-398a-9656-56897c266232.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 107.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:ed:bf:cd:ed:13:32:44:0d:5f:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=1f944704-789c-457a-9482-e63b4ffd7d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:bb:21:56:9a:3c:00:80:a2:4f:6b:dd:82:
fa:bf:fe:a8:82:c7:49:dc:93:55:16:fa:6d:b2:83:
20:29:e3:c4:cd:e4:cd:52:aa:12:f2:7c:1c:1c:d6:
0e:82:06:65:90:a4:77:74:fa:13:5a:9f:61:9a:a3:
4b:7b:a5:0d:87:c4:a0:eb:64:5d:d0:fb:62:f3:65:
bb:fd:e3:d6:74:7d:09:72:da:5f:71:8b:46:ff:69:
f6:a7:f7:99:ab:a9:1e:57:2e:88:31:50:a4:64:d7:
82:cc:05:9d:1a:29:cb:b4:d7:d4:1d:fe:8f:8d:65:
33:8d:ec:38:42:36:82:17:21:4b:77:04:57:b5:d6:
f5:45:05:2d:6d:55:c6:b9:31:ec:37:c2:72:a5:31:
f2:2f:97:3a:26:09:b1:95:4b:13:b6:b7:67:94:dd:
ad:5a:97:2e:58:92:cc:ce:81:45:a5:65:28:e2:e9:
f2:14:ef:e4:dc:1e:a5:5a:a9:9d:a2:80:fa:60:d3:
63:94:24:25:0d:23:c5:f7:e6:ae:b4:a3:d2:3b:10:
8a:b4:ba:77:b2:9c:b1:92:45:c7:fd:5f:8a:cf:56:
32:22:37:60:27:03:2e:21:2c:b6:9e:83:ad:db:07:
fa:57:cd:3f:e0:32:0c:36:f6:d4:b9:1c:11:e1:4c:
e6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:00:FC:49:3F:CA:D3:6A:31:5A:60:0C:1D:7C:81:CC:79:32:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be9006e1-dab0-398a-9656-56897c266232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.176.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:3d:55:9f:91:e3:df:ee:dd:23:e7:61:2c:39:cc:df:4e:28:
79:dd:c5:60:c0:ed:cf:87:1e:5c:19:8f:4e:35:da:0b:93:ee:
2d:bc:ae:7a:2e:1d:40:1c:11:6e:a9:35:01:93:cc:58:a4:80:
d6:42:f0:1c:2c:86:c6:0c:4e:16:42:3d:9f:1d:c9:c1:41:8a:
03:29:27:2e:08:cd:dd:75:8c:b0:88:42:6a:67:dc:07:9f:42:
c5:e6:d0:e1:91:79:e3:3e:ae:5b:2a:8c:73:46:51:67:ac:e5:
d4:06:fc:c4:fe:eb:27:dc:36:21:3b:d5:27:39:95:3a:2d:97:
de:37:84:d4:9d:68:a4:f8:7b:81:da:9c:fa:18:da:3a:0b:6e:
82:b9:19:50:ce:fd:64:78:38:7d:bc:ec:a1:4c:ea:b4:85:01:
41:4e:d8:a0:27:13:b9:df:87:df:85:ae:19:21:9c:8c:4d:14:
1e:50:2a:67:e9:0a:bf:6b:66:9a:d8:66:98:ee:a1:2c:d0:a5:
4d:2b:fc:3a:0a:5c:97:ed:b4:d9:cd:16:e1:cc:50:a2:ed:c6:
41:d8:5c:22:73:2c:68:a5:fb:eb:af:2a:e3:d6:e8:e7:77:75:
5b:b8:1c:12:0e:4e:2e:43:d7:1b:8c:62:ad:e4:0a:69:ac:24:
f7:f0:02:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:57 2025 by rpki-client