Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da55aec9-2491-3717-b9d9-baa4fadb5cdb.roa
File: da55aec9-2491-3717-b9d9-baa4fadb5cdb.roa (raw, json)
Hash identifier: Tjg+9PMfSkT11ZJXQo2q3zV+dV8pltrqobvYXGzb64g=
Subject key identifier: 60:74:D1:C8:45:5D:CA:73:7C:FD:48:CF:DB:11:2A:EA:A3:A5:4E:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408F01807B05A9A3CED05DDC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da55aec9-2491-3717-b9d9-baa4fadb5cdb.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 75.2.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8f:01:80:7b:05:a9:a3:ce:d0:5d:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=70d31f38-3b5f-460a-8522-4028fb7e8bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:78:08:0e:a4:e6:7c:97:fa:10:ee:d8:b1:
51:10:dd:1e:49:05:ad:4a:35:d7:9f:97:45:e7:2e:
a5:e2:a2:1c:9e:4d:8d:0a:66:62:c2:ef:e7:91:8a:
67:4f:e9:0a:06:0d:b4:9c:e6:d3:4b:d2:b1:30:ff:
0e:e8:00:57:8f:72:cc:83:f2:0b:15:ec:33:d7:f2:
df:6a:0a:69:80:d1:48:a8:81:e0:c1:4a:3c:57:5d:
d2:fa:4a:67:3b:06:2a:e5:96:ed:f6:34:ec:32:30:
49:50:fc:33:ae:07:1a:9c:68:a2:d6:dd:e5:c5:a0:
31:90:a4:e6:12:f0:5b:54:da:1b:46:91:36:0e:3d:
5d:cc:53:cf:78:43:6d:30:42:74:1f:5a:ed:fe:96:
59:7b:a2:33:d1:6c:3f:8a:b1:21:c0:a2:a0:75:ef:
40:4b:2f:ad:e6:75:1b:52:c8:ec:aa:c3:96:2c:1f:
4b:b4:70:1f:de:a4:67:ad:8e:62:0d:6b:74:6e:5d:
4e:ed:75:7f:bd:bb:fc:00:ab:e6:43:6a:22:51:48:
6f:f9:67:b2:d5:ff:06:4e:70:1f:7f:45:c8:0e:04:
ac:8f:78:df:cb:47:8e:67:bd:f8:8e:43:8a:73:09:
02:fa:6a:48:15:6d:23:e7:ed:37:e0:53:2c:cf:6b:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:74:D1:C8:45:5D:CA:73:7C:FD:48:CF:DB:11:2A:EA:A3:A5:4E:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da55aec9-2491-3717-b9d9-baa4fadb5cdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.2.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ae:38:88:6a:0e:a0:41:72:e7:16:3b:6f:dc:30:09:32:a3:
af:33:ec:bf:e5:2c:3a:85:18:9a:58:55:9c:02:c9:14:57:6b:
34:84:78:92:6f:47:69:d9:7f:e4:5b:5c:d1:ae:f3:88:d8:37:
b6:4a:e4:05:65:1c:2f:f6:18:d8:0d:ad:e4:67:6a:66:e8:0e:
c5:79:95:20:73:c0:0e:d1:7c:80:a3:3c:b6:85:6b:d5:79:a8:
a8:af:9f:85:58:94:4d:a3:94:e5:10:08:f2:e1:7c:91:42:27:
9b:1c:1e:60:a3:90:0b:9c:e7:aa:02:a5:86:3a:a6:e9:16:11:
d3:48:ac:1c:7f:df:13:ed:a3:0e:7f:e8:09:6c:94:2e:8b:d8:
d9:0f:9a:94:47:97:b6:b3:57:0c:b6:eb:ad:5e:53:f3:4e:e0:
fc:f8:0a:13:ff:04:a0:08:70:5b:a7:a8:c1:93:04:4d:74:fc:
b2:65:70:52:d4:a6:8b:02:1f:ff:d9:f4:bb:80:68:fa:92:df:
52:35:8a:c3:84:a7:aa:be:cc:cc:2e:61:45:12:78:be:4b:b9:
5f:85:82:c5:ca:4a:bf:b5:e4:99:c7:4f:57:93:2d:23:b7:b2:
bc:97:f5:7b:c8:94:fd:b6:81:22:35:85:eb:e3:2c:4f:56:09:
f1:ba:90:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:41 2025 by rpki-client