Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be98d163-cbad-3ec3-a385-e1db28434355.roa
File: be98d163-cbad-3ec3-a385-e1db28434355.roa (raw, json)
Hash identifier: hFWitQHzQCGw7ST8Yb2IE7Qt5DE6pfz7WOtQyvxXPuY=
Subject key identifier: 37:16:F7:36:DD:63:F7:6F:5D:10:73:92:75:06:02:6E:D0:AE:12:FF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3301EC8D7864895B74086A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be98d163-cbad-3ec3-a385-e1db28434355.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:01:ec:8d:78:64:89:5b:74:08:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=152c5344-e832-45a7-b4f3-a603c6ea5145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:ae:f3:60:4d:37:fb:1a:65:4b:2c:57:bd:
4b:ee:c0:b9:df:89:e8:48:6f:41:d8:9f:50:08:63:
7e:5c:32:94:ee:a4:a5:00:90:c4:d6:29:f5:b6:fd:
9a:d6:bd:1a:13:33:35:2c:a4:cd:37:d9:92:33:50:
8c:b0:6b:b4:e8:dc:3b:6c:5e:d3:24:db:48:39:04:
86:57:75:18:ae:79:e5:48:59:f1:69:5a:7d:87:be:
af:41:9d:81:04:77:63:53:be:d3:ad:19:3b:ff:8d:
90:8a:ba:4e:43:20:88:60:87:04:cf:3d:6d:61:6e:
47:2d:00:20:0f:19:fb:a6:75:c8:b3:af:25:77:9a:
a9:90:e4:2a:c2:70:8f:32:6e:8a:65:eb:c3:70:76:
78:bb:e4:02:fb:0c:21:8f:15:23:91:bb:bc:fe:cb:
7c:d9:0a:ba:77:4e:c6:17:05:0b:3d:ff:94:c9:f2:
4a:d7:d7:c0:03:b2:1b:fe:c5:ae:d3:7b:4f:86:8a:
88:70:c7:e3:3b:4c:c9:27:6a:0e:af:0c:6c:6f:56:
d5:94:87:ad:e8:ce:91:b3:c8:2b:b3:23:03:d3:9e:
46:39:33:c2:20:9e:ad:b9:d2:4f:9e:ca:3f:a3:c1:
b5:5b:58:d5:dc:ba:64:bc:6d:12:ed:b3:0c:3c:e9:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:16:F7:36:DD:63:F7:6F:5D:10:73:92:75:06:02:6E:D0:AE:12:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be98d163-cbad-3ec3-a385-e1db28434355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:d4:20:89:6c:7b:62:98:98:f0:89:09:da:59:ad:83:79:bf:
89:6a:18:10:45:77:1d:ca:0c:ba:f3:fd:11:24:e7:0c:63:aa:
98:fb:66:c8:2c:e2:0b:c7:1e:f8:9c:77:2a:18:50:f0:fa:c2:
ce:91:1f:40:a1:e7:70:d8:e6:cd:62:e9:0d:6a:83:39:c2:03:
84:e1:9e:2a:b1:d2:d7:4a:44:4c:5e:47:9d:66:5c:78:da:9b:
04:31:15:2d:3c:c4:21:ff:6a:1e:1a:02:50:04:0a:20:91:b4:
1c:62:f7:b0:50:16:cb:01:ac:05:b3:a7:25:9f:90:e4:5a:d4:
30:0a:68:e5:0c:75:a4:95:aa:bb:70:92:20:f2:24:81:00:1d:
66:05:35:5a:de:1e:14:b3:11:23:36:bc:68:7a:7f:6b:22:31:
48:40:0a:19:45:99:93:20:bf:c9:cf:f1:3a:79:dc:16:9a:94:
e3:7d:a9:be:cf:0d:e9:41:e9:a2:ab:f0:75:c9:93:e3:ad:35:
6d:ab:a5:b2:2b:8f:fb:e6:6b:c9:be:15:64:20:c1:52:1a:36:
5b:6b:4a:5d:6b:f4:cd:13:3b:a2:50:7b:00:26:c5:99:7b:f6:
1b:c5:c6:8f:fb:ae:fe:53:0f:df:2b:97:f7:14:de:d8:b2:fe:
58:d1:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:03 2025 by rpki-client