Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4cd8974-f9b3-3393-9f2b-5b7013215637.roa
File: f4cd8974-f9b3-3393-9f2b-5b7013215637.roa (raw, json)
Hash identifier: cvag89dh7X4YYP0x4nxFTc0XYyejqx4cigGqCjxY5tM=
Subject key identifier: 63:22:CD:17:D8:B3:B5:0E:B8:CB:EA:38:4C:33:4A:C1:EA:29:C2:4A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA945167D626F323EF90355C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4cd8974-f9b3-3393-9f2b-5b7013215637.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:45:16:7d:62:6f:32:3e:f9:03:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=5c34f012-9fbb-414e-b4f8-4a66a38a8751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:f5:b3:02:40:a0:6c:d5:5d:a8:cc:9f:f9:
22:29:ae:4b:4f:75:45:9a:c2:5c:70:23:67:ce:af:
c9:ad:aa:43:1e:37:75:80:93:95:70:2a:0d:93:3c:
88:a4:0d:5c:41:a6:43:29:2e:2e:67:11:12:16:fd:
21:08:c3:da:8b:42:71:89:94:01:89:57:ca:c5:72:
0d:12:6a:c5:8f:15:c9:04:f3:ed:d6:4f:1b:bf:54:
ff:83:76:31:92:52:ef:5e:6e:6b:3c:81:6a:3d:41:
03:f9:1f:b9:e5:0b:2b:17:49:c7:c3:e4:e3:94:3a:
e8:78:c2:c8:18:12:9a:49:45:b1:b7:43:33:f4:49:
bc:89:09:ea:a1:61:d0:fd:1c:ba:35:dc:dc:95:4a:
b9:0f:2c:76:0a:0e:14:f8:78:47:c7:e4:79:8a:48:
14:ce:7f:42:26:d3:7b:24:cc:c6:91:ca:15:87:1b:
c3:22:c3:89:46:4c:e1:a4:42:98:84:f1:03:91:ff:
62:85:75:52:11:0d:51:02:45:f6:e7:eb:8e:5f:30:
1d:4b:a9:5a:f7:49:fd:1a:63:17:e5:11:c2:2b:49:
0b:5c:49:93:b7:f0:c2:e1:c1:c6:f5:c5:2e:4c:c9:
57:a0:98:e7:96:54:b3:92:8d:e2:ac:16:db:84:2b:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:CD:17:D8:B3:B5:0E:B8:CB:EA:38:4C:33:4A:C1:EA:29:C2:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4cd8974-f9b3-3393-9f2b-5b7013215637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:b9:1c:77:00:b1:70:51:10:d6:9e:fc:ac:3b:4b:74:64:9d:
78:62:e7:76:39:4d:cc:47:b6:4e:d5:77:7f:90:99:14:60:f6:
ae:03:0f:0b:f9:ba:ca:22:f7:75:15:86:f0:85:cb:53:32:27:
af:88:0c:61:a5:cb:bf:98:94:ca:ec:49:ad:02:f8:f5:82:cf:
a8:7f:28:c6:66:7d:48:37:77:87:7d:f9:81:2f:c5:c5:b5:44:
7a:d4:51:36:4c:51:28:fa:56:3b:a6:af:16:68:83:4e:11:bb:
e0:8e:f5:65:31:ba:2e:08:48:ad:5e:60:3d:aa:b4:43:74:95:
95:91:30:ce:20:83:21:9c:2a:71:48:1e:1d:0d:f2:6d:6a:b5:
30:00:af:4d:82:65:1b:6c:9e:34:48:c0:99:ff:5d:cd:27:28:
5d:19:e5:2b:b5:02:9d:9f:29:e8:f0:59:bc:e9:8b:fb:55:74:
e4:54:b5:77:a4:e4:eb:93:8e:7f:49:22:e1:33:fe:cd:3a:f6:
19:93:5d:31:d5:70:18:af:b7:dc:5a:87:71:04:6a:15:2f:a9:
5e:11:74:ef:ae:49:a5:c8:b5:44:e4:6d:58:7f:01:dd:d3:ab:
b0:f1:56:95:24:17:c2:32:6f:14:92:00:44:42:c3:4b:d9:d5:
c3:20:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:20 2025 by rpki-client