Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9b71b1a-9d85-3507-a3dd-c234da08aace.roa
File: d9b71b1a-9d85-3507-a3dd-c234da08aace.roa (raw, json)
Hash identifier: j7vVsV4YZUfftX0Vs/qId047g+3Rq0Ni+egqUiE6+7M=
Subject key identifier: DC:9A:1E:C8:E5:F6:6E:70:D3:CE:23:71:AD:6A:5B:70:DD:F2:A7:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F5AC44ADF432F4AD8226D20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9b71b1a-9d85-3507-a3dd-c234da08aace.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 71.143.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:5a:c4:4a:df:43:2f:4a:d8:22:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=3a3b5a47-337f-43b9-b9aa-865556165c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:8d:24:b8:34:65:3e:34:35:b8:ad:88:ce:
04:7d:90:10:45:f4:55:06:a0:95:fc:d5:4d:5c:1f:
86:df:83:72:fc:af:8d:4c:a7:6d:52:23:fb:1b:95:
96:d8:cb:c3:d2:34:8e:3b:a2:3e:7f:54:45:3d:86:
16:14:78:e5:d3:78:64:c5:e0:ee:7c:c2:b9:8a:02:
99:a3:be:b7:fd:8c:9f:21:a8:29:69:87:b4:27:fe:
e9:31:c9:05:da:ca:3b:ae:cb:cd:81:6d:34:34:bb:
c2:8a:c6:9a:f0:de:ae:5d:d6:11:90:f8:20:ad:58:
3f:12:df:f5:aa:5e:94:b4:02:12:b8:25:17:02:06:
33:c2:31:e0:cb:7a:6f:fd:b8:cb:f9:91:6a:1f:7d:
ed:5c:b4:3a:0e:d6:f1:8d:96:15:ec:e3:b3:4b:6c:
67:2d:e4:48:0b:f1:fb:93:9e:90:2e:05:03:a5:fd:
60:83:bb:9f:d1:b5:e8:f2:e1:cb:35:79:48:c4:11:
0d:ca:01:1a:95:18:a1:88:90:c0:8f:50:be:4a:92:
f2:92:19:3d:3d:41:ed:84:79:d3:04:9a:f4:56:f9:
6f:d4:77:05:ff:48:b8:a3:03:f7:d3:a2:7e:9b:34:
8d:40:57:16:79:9e:15:72:28:57:f3:87:d9:e1:9b:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:1E:C8:E5:F6:6E:70:D3:CE:23:71:AD:6A:5B:70:DD:F2:A7:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9b71b1a-9d85-3507-a3dd-c234da08aace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.143.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:b7:6e:7e:b1:9f:69:20:6c:55:0e:f3:c2:4b:38:3f:2d:6e:
b4:72:ba:67:f1:0b:73:b4:97:f2:99:14:2f:69:4c:ec:d6:68:
27:50:f8:fb:b9:7e:bd:ac:00:6d:72:ab:b6:a5:b4:dd:d9:5f:
eb:9f:3b:89:bc:28:19:db:db:66:86:18:11:c5:9b:cd:ad:ed:
4f:cf:33:20:de:fa:ab:75:5b:c7:13:28:d9:4c:55:e1:bc:b7:
15:3e:8b:66:df:c4:35:31:d4:0d:5a:5d:21:cb:a0:d0:64:c3:
d3:d9:8a:27:64:93:b8:7e:01:38:f6:57:90:58:a3:89:df:07:
41:2d:5e:d4:9d:fc:38:af:6d:d5:b9:46:3c:3a:d2:27:7b:fe:
2b:ad:94:db:a9:88:3f:9d:5a:90:e3:a9:32:d5:ae:f6:37:48:
57:88:29:07:0c:19:2e:c8:59:92:13:86:40:79:5e:46:1d:eb:
e2:17:01:02:99:3d:43:06:8a:3a:40:58:17:5c:d5:83:b8:b0:
f1:57:49:b5:5e:87:05:eb:61:04:b5:5c:4a:f2:d9:be:36:24:
c7:8b:fc:cd:6a:5b:32:a3:e6:ba:82:af:15:51:1b:d8:26:42:
0b:10:99:38:8b:16:3b:8a:a7:73:3e:30:f0:f7:90:3e:e5:7e:
65:16:b5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:44 2025 by rpki-client