Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8ff1e84-bf56-372e-8dd1-d0ca3a710530.roa
File: c8ff1e84-bf56-372e-8dd1-d0ca3a710530.roa (raw, json)
Hash identifier: OqrHS7vq4pl96UZtmoucepiQsugxrmw+Fq/I1X/WKjk=
Subject key identifier: 0C:E0:6D:84:3C:42:11:C2:E0:E2:D3:43:2E:74:B9:08:11:64:08:DD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81254E5849655FB4E315D280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8ff1e84-bf56-372e-8dd1-d0ca3a710530.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:25:4e:58:49:65:5f:b4:e3:15:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=0966b602-b598-4841-b6df-e820e096a2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f2:1d:e1:0c:87:7f:88:be:f0:87:a2:ac:4b:
41:d1:4d:f7:10:76:ad:6d:17:40:69:6e:93:16:ec:
55:02:20:d7:0f:70:20:67:87:5f:56:42:cb:6d:a7:
11:cf:87:f3:06:d3:41:cc:43:53:71:82:17:30:a0:
46:5d:97:94:35:a7:ba:bd:84:e1:27:6d:3b:0b:6e:
85:29:11:64:5b:aa:8c:f0:c0:a3:c9:aa:b3:a5:cb:
d2:54:26:d9:8b:a0:b4:78:d2:45:1d:25:cf:86:24:
0c:52:ee:d6:28:14:8f:2f:61:dd:d0:b8:aa:0d:3e:
1c:16:38:64:44:68:be:de:b5:6d:d4:e9:5d:f5:73:
07:19:5e:74:c9:af:66:00:f7:66:33:7c:94:2e:7c:
3f:16:3f:a6:b2:c2:e0:c3:15:06:b1:f8:62:a4:e0:
c8:e3:5b:ac:de:52:c4:25:d3:9f:f5:07:66:de:30:
c4:28:f3:db:8c:e3:71:84:e5:df:2a:c9:c1:a7:93:
08:9d:d9:e8:65:2b:6f:5c:1e:23:4e:c9:c9:ce:0a:
69:db:34:31:8f:ee:37:08:80:a9:c1:7e:a8:e5:bf:
ae:a9:e5:1c:e3:0f:3f:d1:79:df:83:8f:ce:5a:46:
7f:b2:86:00:60:41:a7:23:1d:30:e4:04:89:8f:27:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E0:6D:84:3C:42:11:C2:E0:E2:D3:43:2E:74:B9:08:11:64:08:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8ff1e84-bf56-372e-8dd1-d0ca3a710530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:b4:76:85:8c:b7:e5:d0:54:51:b0:42:27:75:c7:74:e8:e8:
fe:9a:38:2a:aa:93:1f:d6:7c:91:80:8a:1e:1a:72:c9:35:33:
0f:04:f4:c2:d3:2b:23:e8:93:0c:99:46:c6:13:56:f6:3d:37:
3e:1b:fb:9b:30:12:30:23:87:74:d9:e5:21:fe:f0:14:8e:72:
3f:f3:7b:48:15:91:31:26:98:31:51:2c:98:ea:d5:54:2d:19:
11:c2:19:a0:8a:5d:a7:3a:0a:e0:df:cc:12:8f:66:99:de:d2:
88:8b:1d:14:a8:ba:43:12:45:39:69:2c:b3:c7:fd:6f:f8:21:
ab:20:fd:4d:37:68:a4:5c:85:cb:1c:7f:71:52:7e:eb:3d:6c:
87:48:ca:ed:1d:97:d1:f7:83:00:f1:0b:d9:67:13:49:79:a2:
ad:4f:9e:de:01:e0:0d:3a:6e:5e:85:3d:2f:d8:4e:61:24:4f:
f9:2b:d4:eb:0a:75:25:d9:1b:0a:a8:2b:87:aa:ad:37:3c:53:
cc:78:62:e2:8d:f9:30:c7:1c:3d:6a:f1:1e:f6:8f:8b:a4:90:
0b:47:89:3f:fb:bf:aa:97:68:65:04:24:76:bc:46:c8:23:7d:
d4:03:0f:e6:b0:9d:c6:57:5c:fa:14:13:fb:7f:ca:5e:87:1a:
a9:0e:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:44 2025 by rpki-client