Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f23099ca-d55f-3c7e-92f9-79613bf6817c.roa
File: f23099ca-d55f-3c7e-92f9-79613bf6817c.roa (raw, json)
Hash identifier: tHBuyk3Swe3sxTxO5ZJPj9UJYSdtLr/kBicSBqUhMMo=
Subject key identifier: 80:53:43:DA:CE:4C:69:21:64:06:07:8A:72:EE:F6:C9:0B:20:99:9E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCF1315A9D39B15D8D276CDD0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f23099ca-d55f-3c7e-92f9-79613bf6817c.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 76.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:13:15:a9:d3:9b:15:d8:d2:76:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=03d93323-8ec7-41f9-bf3d-b378add2c00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:3a:f3:6e:b6:9a:93:df:f2:d1:71:a4:b4:
68:40:c2:7b:ee:74:65:22:7e:26:80:4b:9c:db:f4:
29:2e:ec:42:e3:af:ca:02:d4:a5:da:89:a1:29:c4:
91:dc:49:96:d7:ce:94:3d:74:af:42:6d:3d:b4:cc:
91:34:8a:a9:0d:7f:9c:36:4e:d0:bb:f2:49:6c:cb:
81:01:35:fe:43:5d:69:eb:ad:74:59:d1:e9:01:5b:
cf:8d:71:46:4b:94:82:96:39:72:f0:a2:34:67:ce:
56:67:a9:30:76:48:6a:75:fc:ee:66:87:4e:c3:97:
db:7d:03:31:c2:cc:b2:f4:de:ec:3d:54:82:c9:a6:
ff:e2:c1:ce:ff:f5:5f:14:98:ed:99:a2:72:f7:6b:
f1:b7:60:6c:86:39:55:fa:b3:1b:3d:40:ae:35:0a:
c1:e9:5e:23:9d:f9:45:ef:ce:27:02:32:c8:f8:82:
36:28:b5:b0:e0:03:0d:5f:dc:20:5b:2a:d7:10:8c:
7e:3f:96:16:8b:18:d6:6a:ef:01:9b:f6:eb:28:b6:
02:02:9b:dc:ab:f5:ec:17:74:88:d9:a2:ff:9c:e7:
9d:11:84:c6:34:55:fa:19:88:a0:eb:84:a6:3f:bd:
8e:34:9c:84:ab:ff:44:7a:6f:db:16:b9:17:3c:02:
22:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:53:43:DA:CE:4C:69:21:64:06:07:8A:72:EE:F6:C9:0B:20:99:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f23099ca-d55f-3c7e-92f9-79613bf6817c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:45:29:6d:13:2e:bb:6e:4a:f8:52:5c:17:d7:53:69:63:7a:
5c:65:94:6b:33:8f:99:55:52:25:d6:ba:7b:05:e6:05:28:c6:
b9:1a:65:d8:91:30:a9:73:b4:69:59:6a:c1:29:21:e3:8b:89:
48:cf:68:bb:59:29:1b:d8:b1:85:b8:3e:df:11:aa:ea:85:43:
58:0a:c3:53:a3:6e:ac:d7:f9:0b:23:cb:77:7a:23:94:e7:54:
e8:17:f9:55:ee:3c:5e:60:76:cb:ca:56:5e:f5:93:c5:a5:b6:
bd:76:d7:5d:0c:fa:36:f3:92:24:8c:de:d7:f3:ee:47:38:a7:
58:e8:57:bb:7a:a9:8a:61:55:4e:cc:a9:f7:98:20:36:26:eb:
d0:26:b1:cb:32:c5:c7:bc:b5:37:0b:73:30:17:ca:2f:7f:cc:
3b:ff:10:20:70:2c:27:94:2b:7f:0d:e7:46:d1:88:74:9c:f0:
2c:ce:b4:3f:9f:9d:ad:31:78:41:89:e5:b6:d8:1f:09:54:f8:
89:7c:e5:d4:f8:78:d8:ab:f7:83:0d:11:62:76:2f:02:3e:b0:
b5:5d:df:2f:86:50:e1:f1:1f:ea:84:61:c7:18:44:6f:18:e2:
ba:93:4f:52:27:ea:34:42:40:6e:58:f6:34:a6:04:8c:a9:eb:
85:49:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:33 2025 by rpki-client