Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d98e3f41-8336-3632-b2d5-579aa4bfa3d4.roa
File: d98e3f41-8336-3632-b2d5-579aa4bfa3d4.roa (raw, json)
Hash identifier: 2rg/HGGmcgzp0JCQdDH7yZ4U8JDpsm/cPdBunX4Vq4Y=
Subject key identifier: 61:BE:7D:A8:E1:FB:03:3B:A2:D8:F1:F5:1E:28:6C:0B:7C:BA:7E:66
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF692B3FCF172421E8A1EFA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d98e3f41-8336-3632-b2d5-579aa4bfa3d4.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 76.197.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f6:92:b3:fc:f1:72:42:1e:8a:1e:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=2324dd3a-12a6-4ca0-91a1-79e1c52f9d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:53:63:63:d9:fd:25:98:5e:23:ed:b4:93:
aa:37:10:c3:32:ca:92:8b:f9:7c:a7:e5:0a:3a:85:
60:9f:20:60:d0:58:b5:5b:e0:e6:65:33:39:e6:8a:
65:e1:63:ce:c2:af:37:c3:27:b1:72:37:8c:e2:c4:
e6:23:15:bd:2b:a8:2d:b0:a9:e1:90:14:ed:13:04:
86:b6:07:1b:84:a2:34:95:0d:10:1d:1a:89:00:b5:
b2:5e:3c:c5:7b:be:af:62:2c:72:1b:20:3c:a9:9f:
43:b1:8f:dd:5e:ad:63:52:18:b9:09:ce:7c:c9:80:
98:c2:a6:d3:f7:08:39:da:3d:93:ca:75:e8:6e:3d:
b2:f4:1b:0c:65:d9:2d:67:30:88:76:73:ae:ed:ed:
67:5c:3c:11:9c:8e:68:32:ff:3e:7b:e1:8b:78:db:
7b:12:5b:37:68:5d:12:b7:54:6a:8b:ad:03:42:e7:
e7:1b:f9:bc:07:95:1d:d5:2d:f2:a3:fd:e8:a8:f7:
9d:bd:0a:74:f0:32:2c:f8:b8:40:c8:44:b1:57:12:
d9:be:1a:39:cb:3a:06:10:6b:ad:2a:5b:b4:e7:72:
64:8b:33:6b:27:3f:4a:e3:33:46:13:02:5c:62:0f:
3c:f9:d9:c4:78:95:38:9c:d4:1e:47:a1:46:45:9c:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BE:7D:A8:E1:FB:03:3B:A2:D8:F1:F5:1E:28:6C:0B:7C:BA:7E:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d98e3f41-8336-3632-b2d5-579aa4bfa3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.197.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:10:59:df:f5:bf:c3:14:44:24:48:df:2e:6d:c1:f9:c2:69:
ad:20:ba:38:94:6c:a1:6f:a7:a2:ca:95:27:c9:f7:e2:b4:f5:
e8:f1:46:67:e4:14:22:6f:bc:f1:5c:ac:a1:3a:ae:2b:64:a5:
ff:d8:81:7b:af:02:88:dd:b9:8c:b5:da:47:65:f8:76:2f:5c:
69:19:ff:c0:e9:a1:38:7d:5e:cc:57:80:a0:4f:43:c2:fa:4e:
a5:ec:15:5c:ce:2b:f2:c7:b7:e3:6c:34:c8:08:57:0d:f9:1b:
b4:2d:38:47:b7:03:43:6b:a4:65:9e:36:f7:03:c6:2d:29:0d:
2e:f8:35:ce:12:f0:b3:08:6d:09:a4:fa:04:5d:b3:1d:1a:51:
6c:74:d4:b7:38:21:96:8a:a8:a2:cd:4b:79:18:ec:aa:c4:41:
ef:b6:7f:0d:a5:7b:a8:a6:5d:83:ea:1c:fb:70:84:8b:98:fd:
9e:aa:cf:77:a3:de:64:00:f1:38:ed:3d:ed:4c:0a:91:ed:d3:
f2:99:7a:c3:43:a4:e7:1e:ae:2e:ae:1b:93:85:b5:35:3d:5c:
7a:96:86:a7:d6:31:a5:d2:0a:95:bc:52:53:74:f9:a5:24:c4:
da:59:9f:bb:03:ce:92:0f:76:36:b6:df:e0:13:a9:a1:a0:ad:
46:ec:77:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:03 2025 by rpki-client