Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa945958-5fc0-36d7-81e3-ed6e20b410ce.roa
File: fa945958-5fc0-36d7-81e3-ed6e20b410ce.roa (raw, json)
Hash identifier: jmu6iiYN9Xiai5vAEIii+Nn65/y8Ob2yVxcfOVbGrL0=
Subject key identifier: 85:04:FD:43:05:AF:EF:F9:B8:46:34:50:D1:F8:00:52:BD:33:89:03
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6F063F3BF7941B5DC09640A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa945958-5fc0-36d7-81e3-ed6e20b410ce.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 64.252.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:06:3f:3b:f7:94:1b:5d:c0:96:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=1c78e54c-68bb-4c26-ba0b-4648bc92b1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:ef:7b:14:a7:6b:b5:4e:40:e2:fd:59:a0:
c5:1b:d1:87:ca:67:39:c1:4a:bf:73:da:7d:9c:33:
bf:ca:67:17:0f:91:2d:d4:65:c1:0c:ae:ca:13:41:
1f:f5:14:1f:60:65:e4:ad:24:b8:25:04:46:2c:39:
e3:47:00:e1:d2:c9:30:bc:ca:c3:75:d1:0b:ce:45:
0d:80:31:a9:9c:64:c2:d3:34:aa:82:c3:3b:f0:eb:
b2:d4:eb:b2:7d:68:bd:4f:40:7b:99:85:ea:9a:81:
e0:48:51:e5:f1:da:46:0e:f0:89:de:af:d3:b9:50:
14:a6:ec:d2:11:29:49:7c:9a:6d:e6:d0:62:24:5e:
15:0e:6a:20:cd:79:ec:34:97:86:06:a6:5f:55:8d:
c6:08:3b:7f:34:7c:77:aa:83:c8:de:22:37:1a:07:
2f:b1:b9:16:7a:be:b6:36:b9:db:e6:79:a6:75:9a:
b6:6c:d9:ac:07:37:99:d3:65:ad:43:cc:0b:57:2f:
7d:af:0b:06:fb:26:97:15:60:a5:46:94:c4:03:8d:
63:25:e0:86:df:24:d3:85:c0:73:11:c5:73:eb:bb:
9b:6c:9d:a0:50:3e:10:41:a2:a4:a7:fa:e2:06:54:
30:df:fb:0d:d1:ed:fc:02:72:d9:90:b8:2d:2a:f9:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:FD:43:05:AF:EF:F9:B8:46:34:50:D1:F8:00:52:BD:33:89:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa945958-5fc0-36d7-81e3-ed6e20b410ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.252.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:27:c8:4f:7d:24:06:3b:c1:b5:d2:e5:c4:57:8a:69:0e:96:
2d:aa:41:3f:42:c0:1d:c2:10:a8:d8:f3:2b:b4:83:a1:fb:30:
71:4e:ec:b5:54:fd:3d:4c:2b:df:e9:cc:b8:35:81:b4:3d:e3:
95:79:69:b3:48:9e:e4:eb:a1:0f:fc:1c:ef:71:73:a2:f5:a5:
2d:d8:65:c6:3d:d8:20:2e:2e:c4:a0:9b:c5:e8:3f:d1:d0:cb:
fe:03:98:2f:a9:06:82:39:35:bf:2e:cf:22:db:02:cd:13:41:
b6:b2:91:1b:97:5e:59:66:c5:11:f9:f8:a5:ec:7d:10:74:2e:
bd:63:b7:12:d4:39:87:80:6a:db:eb:98:e5:fe:20:c8:e7:a3:
39:56:ba:d8:6d:f9:89:3d:77:af:ee:3a:eb:52:a8:4c:69:e1:
85:a3:8b:44:c5:a0:6e:7b:a7:0a:67:18:4a:fa:87:9c:f7:46:
bb:fe:ac:af:1d:62:8d:2b:f9:09:ed:be:c7:6b:39:cf:ad:63:
4e:a3:bb:b1:ec:02:56:ae:4d:83:20:21:df:bf:96:9b:d6:82:
dd:9c:a9:a5:b3:a4:73:0e:7f:5d:7d:f0:81:71:da:3e:ea:fc:
62:57:d6:26:4a:b7:f0:85:45:03:b0:9d:0f:c4:27:f8:07:8b:
52:7e:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:33 2025 by rpki-client