Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7f67507-a9a9-318a-b0bf-b052aed89aba.roa
File: d7f67507-a9a9-318a-b0bf-b052aed89aba.roa (raw, json)
Hash identifier: QkJ9RXTxgnpb1wc+Hs9cmUgk2vWozpZ/ZIccYUOQnRs=
Subject key identifier: FA:5B:EF:58:FC:1D:46:84:F8:39:30:28:D1:F9:C5:82:38:10:A6:80
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584044BBF81ED78B801A3F505420
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7f67507-a9a9-318a-b0bf-b052aed89aba.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 71.141.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:bb:f8:1e:d7:8b:80:1a:3f:50:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=60c942a9-e76e-4166-88c5-ebce1509e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:0f:30:d0:cc:29:8f:3d:74:a9:5c:54:0e:
3b:84:b4:99:07:62:22:fe:c9:71:79:57:e7:81:14:
34:5b:61:01:3a:56:8e:14:4c:53:38:30:f7:4a:64:
be:1f:b3:b4:d6:d5:ee:ce:d9:01:a5:1d:99:ec:e7:
75:5a:6e:3c:25:23:2e:c7:61:da:11:34:c3:07:a3:
21:47:77:29:e2:ae:2f:de:ee:2c:fe:19:21:28:1c:
8b:4a:7d:fe:18:10:f4:48:ed:55:92:e6:da:af:ec:
8a:98:e4:04:3a:b5:28:33:76:ab:08:17:73:d3:10:
22:b6:ac:bd:77:62:15:31:96:e3:65:42:c1:15:8c:
30:29:28:f7:42:1f:87:61:12:17:32:88:46:83:30:
de:95:2f:58:24:6d:97:57:7d:da:02:10:fd:2d:24:
f7:21:36:21:de:ef:f0:75:a2:d5:d4:72:f0:ab:8c:
71:46:50:1f:1c:a1:31:da:91:8c:72:4f:bf:eb:e2:
8a:93:f1:c9:db:21:11:83:09:7f:80:2f:4c:ca:39:
ee:18:6c:de:83:93:c5:28:ec:6d:95:fa:a5:e1:a9:
f4:64:cb:0d:d1:0b:b8:ed:b8:23:1d:fd:25:73:b4:
4a:3a:99:ca:92:7c:d2:05:05:de:ca:45:2f:c8:bf:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:EF:58:FC:1D:46:84:F8:39:30:28:D1:F9:C5:82:38:10:A6:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d7f67507-a9a9-318a-b0bf-b052aed89aba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.141.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:c7:38:d0:7a:ce:64:79:51:41:08:d4:09:a8:5c:3c:59:7c:
e3:ee:50:25:d3:c9:80:56:81:83:a4:fe:8a:50:61:57:d2:ee:
00:63:bf:29:32:3b:d8:ef:4a:b3:7d:96:6b:da:6e:66:74:89:
7a:fe:5c:36:e1:45:b2:fa:ca:ca:54:d8:9d:f1:34:4c:1c:74:
9b:25:3e:45:5a:1b:ba:fd:33:9c:65:46:ac:de:c6:c8:ef:d9:
df:97:cc:79:3d:3e:78:7f:0f:91:37:cf:01:aa:c5:aa:5f:93:
88:f1:67:0b:d1:98:05:7f:46:c9:ad:46:2b:26:00:61:91:94:
9a:e1:99:0b:1e:1b:eb:b3:5e:82:8a:fe:7c:0e:d0:37:75:33:
2f:0a:cc:c2:06:38:13:02:4a:f0:59:63:1f:fc:13:3f:a3:15:
00:57:d4:05:0a:14:7b:5f:9f:3c:6c:1d:2e:cc:74:6e:cf:6f:
09:87:ee:77:6d:95:de:43:0f:dd:61:1d:bb:47:4f:4c:23:2e:
87:ea:a9:ed:f6:c6:23:5e:7b:e9:6f:b0:3f:f5:c6:65:9b:b6:
b0:c4:6f:dc:98:42:5b:2d:83:70:2a:00:f4:b0:27:61:38:d3:
d0:66:47:71:2a:30:8f:57:3f:fd:b0:33:5e:f3:5f:06:93:75:
f7:be:65:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:22 2025 by rpki-client