Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f81540a2-e0c3-3a21-a3a2-a83c58fbc27f.roa
File: f81540a2-e0c3-3a21-a3a2-a83c58fbc27f.roa (raw, json)
Hash identifier: ebPGEhISWQ0OxG1eEoo+22S1m+o06A+Xra+iF2ck2dM=
Subject key identifier: A4:3C:8B:49:AF:13:A3:BF:18:9D:A0:D4:E1:8E:9C:3F:B4:33:2E:B3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCD8FDEC25E9694426D0FD2C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f81540a2-e0c3-3a21-a3a2-a83c58fbc27f.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cd:8f:de:c2:5e:96:94:42:6d:0f:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=980afae3-bcd9-4e1c-aba3-8b6d4fdcc3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:7e:99:62:d8:34:38:85:f9:ec:49:00:e0:
21:d6:c7:53:65:66:7e:a6:8f:80:8d:3e:ea:40:cc:
b5:6b:49:ee:f3:e8:f9:27:0e:5a:e1:e8:e0:32:21:
8b:c2:1d:34:d1:29:b9:19:6b:38:31:c6:8f:d7:85:
83:62:a4:80:b4:67:68:a0:40:f4:ce:4a:88:83:3a:
6f:da:20:73:32:44:6d:8f:c1:a8:b9:0f:af:14:60:
55:b6:3a:77:b2:93:89:15:bf:f5:9b:13:d6:ef:c8:
9f:b0:87:03:c3:65:db:4d:03:22:fd:3f:30:d7:6e:
16:23:f1:59:47:53:5c:4c:72:e6:69:d5:2d:ee:5a:
79:39:fc:13:44:5f:1c:69:d4:b4:af:b4:72:5e:7a:
0f:25:58:0d:e6:a8:0f:d3:c8:c8:5a:0e:16:79:06:
03:77:58:b6:3d:20:da:d7:da:88:b3:c1:9e:12:90:
d9:ef:1b:58:43:68:15:17:9d:38:cb:ff:a6:51:87:
5e:e4:b6:a3:f9:e0:58:aa:68:d1:72:06:7b:e5:23:
8f:a9:0f:b0:88:43:f7:a7:e1:f7:ec:e4:a1:c7:37:
ec:59:0c:ec:79:84:7b:bf:29:64:be:fd:f1:c0:2a:
7f:ff:a1:55:cf:32:dc:bd:bc:c9:43:15:9b:4c:cf:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3C:8B:49:AF:13:A3:BF:18:9D:A0:D4:E1:8E:9C:3F:B4:33:2E:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f81540a2-e0c3-3a21-a3a2-a83c58fbc27f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:dd:84:54:6f:0a:99:b2:ec:39:c4:84:30:e9:b3:53:75:50:
7c:28:75:2c:bd:5e:dd:4f:89:28:9d:0e:f8:5e:f2:a6:59:0f:
ab:e9:3a:aa:95:b2:fe:52:5e:d7:21:9c:65:41:14:6d:70:01:
1b:9b:9b:06:74:fd:fb:c6:68:78:ee:7a:26:8a:c2:a9:5c:f9:
43:c4:60:ce:ef:1e:fd:3d:81:cb:5b:f8:9c:f2:dc:c2:44:6a:
3b:ee:d8:d2:0f:3b:b9:84:f9:86:d7:86:42:18:c4:cf:ac:ca:
40:71:a6:77:21:24:7c:22:d8:7f:35:22:9a:db:d8:d5:09:4f:
d8:f8:02:ce:50:f9:09:47:63:e9:3d:96:29:84:c1:88:14:6c:
c7:4c:94:e2:c6:22:a8:5b:8a:58:67:ea:28:c7:af:e1:dd:a9:
af:8c:7b:e7:0b:03:12:7f:e4:81:39:ee:0b:17:95:21:ef:b0:
a5:12:da:6d:2f:9f:7d:60:76:a9:b7:e8:10:7c:93:34:f0:32:
36:51:7d:a1:39:1f:f2:be:4c:16:da:dc:13:03:7a:95:cb:8f:
6f:c8:04:de:86:07:86:c9:35:a1:cb:9a:9a:9e:68:74:02:01:
75:36:98:9a:4d:24:6f:7c:8e:88:9a:f2:91:6a:04:aa:41:31:
fc:ea:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:50 2025 by rpki-client