Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e63a6f62-ad6e-3876-9fc1-60e5d284f2d3.roa
File: e63a6f62-ad6e-3876-9fc1-60e5d284f2d3.roa (raw, json)
Hash identifier: PIvXSydMK0tZNMJC7E1MjAAThYKt1fyG1T1NhELl5Ys=
Subject key identifier: 34:DB:F9:5C:CE:1B:8C:D2:1F:B5:8E:F0:D4:51:02:FA:E6:2D:79:71
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCD2B56B959B014236C881900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e63a6f62-ad6e-3876-9fc1-60e5d284f2d3.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 170.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cd:2b:56:b9:59:b0:14:23:6c:88:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=f8705d42-50ee-475e-9a07-3aa50c271926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:d7:c5:15:c2:d8:06:a2:c2:68:bf:6e:1e:
de:36:63:bd:28:3b:0d:cb:c4:00:03:2a:d2:0d:e7:
f0:8e:3f:1c:8a:db:02:b8:71:fd:77:49:99:c0:be:
4f:ee:75:81:43:6c:ca:31:4f:ea:eb:c8:63:8f:ee:
1c:f5:f0:cd:48:16:17:ac:80:4c:0b:28:a2:e7:22:
6b:f5:86:e8:6f:2f:08:84:ad:8a:94:e0:9d:2d:da:
5e:e6:da:8a:b3:ec:d3:c9:0e:c7:40:7d:74:c3:e9:
3c:e3:0b:50:0b:20:33:19:54:b8:f4:a1:54:08:a5:
67:1e:15:c1:dc:34:ae:d4:ff:47:a9:22:3f:63:4a:
d5:9f:c8:44:51:e6:a7:b8:15:9c:d9:fd:f7:2d:3d:
a1:57:3b:f5:dd:76:03:d4:10:c1:3d:9a:4d:54:14:
99:d9:ee:de:f6:6b:2f:bf:e9:22:50:c4:c4:6a:ae:
a8:de:fa:d1:fa:dc:38:5c:85:d6:8b:51:93:19:8b:
d6:09:67:c6:48:d9:74:23:be:13:0a:83:18:cf:e1:
c9:30:7a:d4:df:9c:95:68:39:8a:30:82:84:91:2b:
16:07:5d:4b:90:97:28:ba:5e:15:67:60:7a:b2:f2:
e4:73:6b:84:f9:b4:b7:cd:11:3a:52:c7:92:ac:49:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DB:F9:5C:CE:1B:8C:D2:1F:B5:8E:F0:D4:51:02:FA:E6:2D:79:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e63a6f62-ad6e-3876-9fc1-60e5d284f2d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:91:10:c2:46:02:6b:7c:ce:6c:00:96:50:1f:67:0b:44:80:
66:cd:3c:22:17:11:61:d4:f3:4a:34:d4:9f:50:05:93:45:1c:
98:a4:39:b7:3f:38:d6:d3:da:2e:99:1e:38:a0:83:38:6a:31:
ff:46:0c:99:47:04:cc:41:d5:51:93:b0:ad:0e:7a:89:3b:87:
8e:76:96:2a:4e:c0:82:0e:5c:37:d4:fc:e5:ee:10:d1:f9:ba:
21:74:8b:86:39:9f:83:55:a7:2c:51:1e:e4:37:7f:97:e0:a4:
ab:2e:fd:e3:ec:9f:a9:87:94:3e:bb:fb:99:64:5a:06:a6:d9:
bb:3b:11:83:02:81:e3:1d:5d:9b:6b:87:9d:0b:cc:f3:83:9d:
7a:2b:58:02:36:d4:11:8b:c1:6a:b4:73:5a:29:0d:5f:5c:8e:
d7:4b:33:4d:63:37:09:ec:87:97:dd:4f:b9:40:86:03:7f:f9:
3b:11:80:2c:2d:96:0d:6c:69:64:6d:f6:1b:fd:af:a8:87:72:
59:94:a1:f3:39:1d:c3:b4:40:e8:86:36:20:c1:a5:22:71:49:
e4:8b:96:6b:40:47:9f:99:db:d5:f0:21:06:75:cc:5d:bf:b1:
f8:dc:0b:ab:44:73:1e:10:24:c5:b5:8e:2a:c2:a3:b1:1f:24:
e3:e0:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:54 2025 by rpki-client