Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d41f8f66-4633-302e-be61-c9be399875fe.roa
File: d41f8f66-4633-302e-be61-c9be399875fe.roa (raw, json)
Hash identifier: czaOf3+5sUVxHrX8a4SqCqxBd8bKORBA9mq5JhwCNl8=
Subject key identifier: 43:4D:7C:95:46:61:41:4B:7A:E9:4C:6D:A2:25:D0:27:5B:49:E2:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D33093DF57295948F089AA900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d41f8f66-4633-302e-be61-c9be399875fe.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 76.205.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:09:3d:f5:72:95:94:8f:08:9a:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=a2dff872-5c4e-4d7d-82a1-c4d08d9dd109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:84:9d:c0:ab:2d:ce:36:58:f8:66:59:3b:a5:
bf:37:88:37:ea:a3:6c:87:3d:e2:91:e8:26:5c:11:
99:a9:45:c7:9b:39:76:23:5b:e4:a0:88:bb:ba:b3:
24:8a:f4:a6:8d:37:2c:ab:5c:e9:84:21:91:de:50:
e4:4d:fd:f3:3a:68:fa:25:c4:0f:b2:f0:53:28:fe:
9f:41:39:0d:96:a2:b1:19:5a:ae:9f:76:7c:75:ef:
6c:76:84:61:c9:8a:e7:e5:4f:57:ce:6b:d6:f3:98:
f9:0f:03:73:8c:1c:90:ed:24:d8:9a:cd:3c:ce:09:
39:5c:24:fb:b4:38:ae:c0:d1:bb:30:ee:6b:12:64:
e2:ed:07:fb:08:d0:e6:2d:ec:1b:a8:16:02:67:21:
36:b0:0e:18:2b:fc:53:0f:70:39:3c:75:50:54:a2:
56:7c:63:12:98:3e:ac:45:7b:ec:de:05:b8:49:58:
46:c7:fd:a0:7f:46:d0:d5:a0:87:37:cb:aa:e3:00:
c0:5c:7e:e6:c4:1f:f3:ae:e6:a1:6d:39:ef:6a:2e:
66:f2:aa:89:29:c5:a1:e2:b7:2a:37:32:f4:14:fb:
22:46:98:3e:f4:24:9e:7a:f2:6c:fc:76:eb:0a:bb:
08:56:d3:8d:2b:59:cc:19:fc:7d:bd:4f:52:c7:5c:
f4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:7C:95:46:61:41:4B:7A:E9:4C:6D:A2:25:D0:27:5B:49:E2:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d41f8f66-4633-302e-be61-c9be399875fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.205.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:98:38:53:54:5e:2a:cf:dd:10:4b:4f:1f:32:e0:e1:25:9d:
7b:bb:b5:af:da:84:61:ea:bd:34:12:2d:4a:c3:2a:ac:07:55:
12:8c:2a:20:97:10:67:c1:bd:33:d8:36:28:d0:77:78:21:9d:
29:de:82:61:4f:49:70:7c:78:0b:3e:af:32:37:83:a5:9a:f1:
08:ff:78:de:20:cb:29:d7:2f:ac:63:28:60:0b:38:d1:04:f9:
54:30:78:fa:da:1b:6c:89:4a:db:54:17:62:a8:08:a1:bc:f1:
12:5e:fe:78:0b:5f:aa:32:f0:dd:8a:0a:cb:83:c8:f3:93:59:
b6:c3:82:39:fd:c4:f1:67:f5:49:19:4d:cd:bc:b7:4f:e8:f8:
1d:cc:b9:a1:9f:27:19:df:bd:54:5a:64:77:18:5a:c6:3d:d3:
98:24:ea:ba:78:2a:16:55:cf:1d:f2:36:9b:7b:24:6f:7b:16:
8f:65:08:50:75:9f:0f:1c:d7:c9:26:4d:c0:3d:4a:42:e9:7b:
65:ae:59:bc:bc:7e:cb:a6:bb:df:bd:c1:9b:dc:99:8c:af:d5:
06:79:52:90:59:87:30:fc:fb:d9:d0:4e:88:d9:27:5c:92:e7:
bf:41:5a:a3:a4:7e:f6:89:67:76:fb:d2:69:5e:7f:c4:1b:33:
04:02:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:51 2025 by rpki-client