Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d996e77e-1736-3d1c-be92-3122ddf175b7.roa
File: d996e77e-1736-3d1c-be92-3122ddf175b7.roa (raw, json)
Hash identifier: CRudJu6yljLSumDrQCzu1BlkllBkmVOgYl59grGjHc8=
Subject key identifier: C3:0A:56:25:68:F7:BD:30:42:C9:77:9B:75:C1:0D:D6:59:4C:2B:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D813C20AC950DA140F99D1300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d996e77e-1736-3d1c-be92-3122ddf175b7.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 76.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:3c:20:ac:95:0d:a1:40:f9:9d:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=048c9ebd-7c94-41a4-9153-0ac827dca0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c7:7e:07:1b:9a:1d:2a:8f:e6:22:22:e7:ad:
66:8a:4b:5c:29:aa:e4:f6:cf:71:9e:67:03:55:ad:
31:03:97:34:d0:28:e0:9c:bd:b1:d4:86:e2:f3:6e:
a8:39:9f:28:09:3b:7e:15:c5:02:69:ed:c9:bf:a6:
dc:aa:60:19:b4:80:3e:40:12:73:28:85:77:91:eb:
9a:23:d7:bc:8b:2f:17:2b:d6:7e:1b:96:57:f3:cf:
9b:01:27:7b:e5:53:43:4a:65:d0:3e:e5:ea:13:f6:
a0:6c:a7:c3:69:c1:a3:17:ab:12:32:8a:18:4e:08:
f7:37:6a:6e:6b:0b:62:62:10:39:25:45:e2:84:87:
a1:00:64:18:d4:ee:f1:f6:26:09:39:24:0f:af:70:
82:4f:e9:c2:d8:10:6d:3f:f9:7c:dc:21:aa:fb:d6:
12:cb:1a:d6:d9:d1:25:66:c0:48:b2:a1:00:78:0f:
59:a9:e9:33:41:ae:c3:37:69:4d:65:c0:69:c2:c0:
8d:a0:6c:e5:2e:c3:88:35:d2:70:4a:23:25:a0:a0:
14:4a:10:51:2e:f8:68:fa:bd:4f:c9:b6:52:d0:10:
1a:a9:bd:85:4a:73:d8:7e:e8:df:0a:89:dc:0c:f9:
8e:f1:e3:85:43:45:24:d2:9c:6e:87:16:0a:81:f4:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:56:25:68:F7:BD:30:42:C9:77:9B:75:C1:0D:D6:59:4C:2B:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d996e77e-1736-3d1c-be92-3122ddf175b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:a6:95:ef:99:c4:de:9d:07:b9:d4:ce:ef:72:bd:53:54:5e:
8d:4f:40:50:cd:6e:f7:63:09:62:cc:88:00:42:71:1d:0c:09:
7d:a0:91:9d:36:1f:5a:04:1d:a9:56:31:fe:34:86:a1:43:cc:
dd:3a:68:62:b6:8b:11:fe:cd:33:40:4f:39:45:a1:fa:7c:01:
b5:21:3c:f0:c1:ac:22:94:40:d5:a0:9f:cc:f3:8d:c9:27:24:
54:52:06:88:ee:b6:96:fb:36:d4:c6:97:a4:46:c1:17:fd:c5:
8c:c8:dd:5c:8d:a5:48:df:42:52:38:06:5d:13:1f:4b:2d:d1:
30:3b:6c:14:12:f2:c5:07:c9:ae:96:fa:32:cd:e2:16:3f:fc:
ca:fe:25:03:71:43:57:02:8a:61:36:05:dd:61:ed:4c:a8:4b:
22:b2:83:2f:50:42:e5:bf:f7:e8:db:51:4c:e5:d4:6b:9b:c5:
8e:aa:80:2c:67:4d:bd:04:6a:b9:90:d5:12:da:59:e5:d3:0c:
6f:4b:7e:71:5f:6e:5c:39:b5:1b:c7:90:62:3e:7c:87:f8:c8:
b3:98:b3:3a:ed:7c:3d:ed:f4:6d:b8:73:cc:e5:8f:fc:b3:e6:
39:cd:b1:4d:a2:f7:f4:e3:aa:5f:f3:a6:1f:c5:0b:2a:c3:b0:
81:98:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:10:06 2025 by rpki-client