Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2268a92-81ce-3584-baf8-64b89fdb7baa.roa
File: e2268a92-81ce-3584-baf8-64b89fdb7baa.roa (raw, json)
Hash identifier: xmqbsAkV6JD5qMy1hNoe5fqYYtqJ3rGA9IK8ZRjNq+Q=
Subject key identifier: 70:67:77:DC:F0:23:CA:1E:4C:DE:8D:F1:71:FD:C1:7B:B1:24:79:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405EE7F5BABA56C67B0F2D3FE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2268a92-81ce-3584-baf8-64b89fdb7baa.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 68.217.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5e:e7:f5:ba:ba:56:c6:7b:0f:2d:3f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=8f5ef36b-794f-4016-b5fb-bd87093768a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:21:25:81:80:eb:ab:e0:1c:f6:ad:0b:e2:
9f:9b:86:cf:33:75:6e:5a:14:8c:7b:f6:42:2e:2d:
8d:3a:92:0a:43:85:81:2a:7a:ce:b4:86:fc:d5:ab:
d6:0c:cb:fc:d3:2f:94:bc:bd:23:99:4f:47:87:cc:
bd:cc:c3:8c:ae:02:b9:4b:77:19:a3:e9:3a:c8:9f:
86:4d:16:d1:44:0b:33:4f:e7:7b:94:f7:99:c6:dd:
8d:0d:7e:f4:94:32:ba:3e:d3:d0:8b:74:4c:96:aa:
20:5f:7a:c7:9c:07:bf:3d:af:19:d0:ce:fb:f0:23:
9c:e5:70:2f:40:29:c4:1b:84:cf:75:1a:11:b7:8a:
1b:31:a6:d3:44:9d:aa:b1:0c:10:22:b0:52:ae:91:
48:dc:b6:c8:c1:a1:f7:2d:40:c9:7d:2d:60:d7:b4:
1d:41:4f:d9:68:cd:38:76:82:92:59:7f:87:7e:21:
8b:8e:5b:31:e5:d0:5c:6d:c4:2d:5d:6f:82:7f:a8:
4b:cd:1f:40:a0:aa:ca:66:4d:ea:77:76:35:d8:e4:
0e:1b:ed:fe:6d:65:2d:2d:90:12:e7:30:ec:56:b5:
50:5f:03:f9:b0:5f:98:de:0c:0d:3b:82:12:4d:c3:
13:cb:76:f5:1a:09:68:4c:fb:02:c7:91:c2:88:10:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:77:DC:F0:23:CA:1E:4C:DE:8D:F1:71:FD:C1:7B:B1:24:79:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e2268a92-81ce-3584-baf8-64b89fdb7baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.217.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:17:c4:9f:f5:11:3c:55:ec:91:43:2b:30:39:47:9e:ba:58:
ce:43:51:01:a3:f5:ff:cd:83:e5:7b:5d:96:35:86:57:de:2e:
6e:27:33:10:40:4b:42:cc:59:18:07:72:39:f3:89:f0:1c:7a:
50:fa:04:1c:4d:2f:11:06:30:ea:b8:99:35:12:56:50:0e:63:
ac:67:cf:92:37:38:28:ff:ed:31:3e:3d:ad:37:6a:92:f4:82:
d1:b8:a0:5c:8c:cd:44:1e:dd:a3:21:94:54:53:6d:69:83:40:
30:b9:83:a0:c2:63:a9:c7:53:76:a8:b4:34:82:39:ba:6c:ff:
0d:22:3f:6e:48:4f:46:b9:76:7e:94:06:6e:ff:de:04:4d:e6:
92:b0:98:8f:87:92:2a:ff:a9:b5:57:93:9b:9e:24:a3:a2:dc:
ea:fc:ce:44:8f:92:6d:87:c3:47:7c:d1:ba:07:01:e8:dd:9c:
f4:61:5a:76:ee:4f:ab:ef:45:40:3b:df:09:1b:0c:d1:bd:4d:
8f:89:0b:76:8e:ba:99:5a:b8:61:6e:78:e6:7f:6f:ec:4d:9f:
35:e7:ff:fa:cf:eb:9c:4a:5e:e3:5f:c0:c0:3d:37:e2:1a:91:
64:81:40:00:49:fa:41:51:66:d3:5f:aa:5c:68:17:87:0a:e2:
71:38:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:33 2025 by rpki-client