Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd20c720-3b31-32a2-a65a-a51c03db5cdd.roa
File: fd20c720-3b31-32a2-a65a-a51c03db5cdd.roa (raw, json)
Hash identifier: gFOxTh2ZPVVgqthoL5V/zgIBLg3rq4rD6uhHXpaPVPY=
Subject key identifier: A2:96:0D:8D:BD:6D:AC:A4:42:C4:8D:0C:AD:88:48:2B:0C:80:E9:6A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6BD359B97C36BE62850F7300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd20c720-3b31-32a2-a65a-a51c03db5cdd.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 65.0.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:d3:59:b9:7c:36:be:62:85:0f:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=d82ef1de-b5f1-4506-a8a7-b53dd998f4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:a2:b4:08:39:77:60:7d:d1:ec:9a:8c:4f:
7a:c2:86:fc:9b:42:54:f5:b6:6c:40:ad:b6:15:c2:
87:1e:51:40:1b:1f:d6:1e:0b:22:63:ee:40:9a:7c:
29:b0:28:90:e7:92:8b:d8:93:be:22:f1:9b:d4:2a:
f7:62:a7:62:7f:d8:99:4f:af:4b:73:b0:55:16:23:
e8:df:9d:18:8d:77:b8:d8:04:92:30:2d:f2:1d:7a:
f4:e8:cb:ad:07:54:de:a2:bc:41:9c:81:97:73:e8:
f7:23:d7:31:61:ec:72:5f:58:76:2e:7b:8e:a1:8b:
16:c7:b3:93:d7:f7:ad:73:fb:1f:21:49:a6:2d:3a:
f8:5e:22:00:37:1a:8d:44:13:01:f9:12:71:dd:6d:
c1:fa:d2:03:dd:5f:7a:cf:81:5a:8a:63:ad:02:92:
1c:a7:5d:2a:d2:dc:44:0b:e7:2b:19:04:54:6c:01:
c0:d0:6a:83:f2:ba:f8:a4:93:3f:5c:e8:ba:03:92:
69:ca:fa:aa:65:79:aa:11:2e:09:1d:d0:12:e1:4b:
14:30:87:30:32:46:18:ba:51:69:ec:e8:2b:47:8a:
9e:a1:78:36:6b:1d:ff:43:99:da:d1:f4:b8:3b:78:
23:d6:8e:eb:6b:0d:d8:53:d8:40:8c:6e:98:0d:5b:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:96:0D:8D:BD:6D:AC:A4:42:C4:8D:0C:AD:88:48:2B:0C:80:E9:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fd20c720-3b31-32a2-a65a-a51c03db5cdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.0.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:93:fd:ec:47:40:5d:fc:0f:85:c4:01:c0:f7:f9:26:70:d6:
77:a7:65:e2:42:5d:50:ac:33:e4:29:e2:ad:09:fc:c5:a3:a8:
25:7e:6e:de:c3:e8:bb:9d:f9:ce:12:f3:39:10:9d:11:29:2d:
d8:b3:cb:cd:c6:33:5d:c0:28:b8:13:dd:25:e8:fc:9c:fc:36:
81:b2:d4:16:32:f8:ef:fb:22:c5:33:f0:35:fe:d7:f3:a7:79:
7c:c8:83:0b:47:db:70:a5:24:86:8f:bf:4a:92:8b:83:e6:b2:
16:52:e7:32:4a:52:a8:2b:58:10:ec:19:ea:1e:9c:ff:ea:4a:
d9:d5:b5:7d:c5:05:8e:5e:50:30:a3:fd:13:39:82:c9:06:bc:
56:f9:4d:3c:de:0d:14:0a:c4:73:c8:24:d8:4b:20:37:98:43:
0f:3e:e3:6c:26:b6:ca:96:a3:4e:7c:b8:79:f5:df:94:6d:ac:
85:f2:a1:e6:f1:de:e3:10:fa:c9:d5:b8:89:fb:fa:f3:4e:97:
43:07:57:3a:16:fb:3b:5a:66:10:e5:6f:51:13:15:c7:e7:a8:
78:72:e2:af:81:0e:2f:05:3b:9c:2e:aa:66:32:66:02:fa:4c:
62:30:d8:b4:9f:f3:c1:39:2c:40:ff:37:1e:11:60:94:68:d8:
2a:4c:fd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:03:13 2025 by rpki-client