Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0690b8f0-e399-316c-a21a-fce7b0926146.roa
File: 0690b8f0-e399-316c-a21a-fce7b0926146.roa (raw, json)
Hash identifier: m4GvHl67lyl8Hlm4mOMWYHbTJz7K746Sx/dYXpIps8I=
Subject key identifier: 8A:38:36:2A:05:12:D1:7D:62:0E:62:92:F8:61:7B:B2:65:ED:A4:AE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404E18E97C6F17891FF0E00680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0690b8f0-e399-316c-a21a-fce7b0926146.roa
Signing time: Tue 20 Dec 2022 18:48:09 +0000
ROA not before: Tue 20 Dec 2022 18:48:09 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:18:e9:7c:6f:17:89:1f:f0:e0:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 20 18:48:09 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=5094a6d7-aeb7-43a1-98b2-bdb16c368f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:3b:c8:85:d3:20:0c:aa:04:21:f7:1e:67:
42:5d:32:f9:74:45:7a:6e:46:b2:f9:d0:aa:0f:f9:
f4:0f:f7:87:11:c5:46:86:40:27:79:51:50:18:a4:
06:91:2f:95:4e:6c:12:c1:1c:8a:5a:98:cc:44:a6:
32:6d:08:5f:8a:8d:46:37:93:4e:ff:5e:24:d4:d6:
54:8f:2f:7b:51:ca:02:31:b1:85:82:cc:03:6a:35:
e6:89:15:fb:98:d8:3d:60:0a:ec:fb:6c:c8:22:73:
2e:f1:6f:ba:58:56:bd:de:cb:47:46:b5:3a:07:76:
06:b6:68:82:b9:7e:86:fb:a7:d6:6b:65:a9:54:b6:
af:1d:a1:a9:de:02:e2:55:c4:db:34:04:e7:42:2d:
19:89:74:c7:dd:7a:44:15:ff:a6:d7:c7:eb:83:bb:
1b:19:66:26:46:9d:4d:ea:77:20:99:9b:a3:0f:ef:
4f:29:81:57:ce:f6:84:3d:43:6a:43:54:d0:6b:a6:
7c:b5:25:fa:e9:63:d1:6e:3f:28:67:26:df:0d:36:
0b:19:bf:15:bd:7d:6c:44:01:8e:f3:ac:19:ee:35:
24:15:40:a3:51:d0:13:4f:91:85:6e:a4:0b:48:9e:
da:6a:b1:40:f7:f9:59:5a:f5:07:87:fd:20:29:4f:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:36:2A:05:12:D1:7D:62:0E:62:92:F8:61:7B:B2:65:ED:A4:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0690b8f0-e399-316c-a21a-fce7b0926146.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:74:b8:2c:9d:3d:d1:9f:99:85:0f:be:5b:dc:77:bb:2c:73:
58:c2:46:e7:13:9f:1f:5d:81:77:91:6e:58:e7:f5:15:1c:7d:
f9:77:58:1e:b8:8c:de:a6:6e:52:27:3c:85:be:bf:e6:34:1c:
56:f3:93:09:bb:5f:ba:a9:9a:45:ae:61:01:28:5b:48:34:f2:
ce:b0:39:72:2f:4d:eb:43:de:42:c8:5e:fc:9b:17:10:95:76:
91:a3:98:b2:bf:22:56:c0:4e:a9:16:d1:0a:5e:09:66:5a:a2:
65:a7:e9:16:46:b3:aa:37:e6:a3:20:38:78:ae:f6:da:a4:34:
4c:30:b0:6b:02:6b:94:2b:69:5f:61:ac:03:31:97:b9:77:a2:
3c:26:4d:08:6a:a1:9e:73:b6:11:d2:e8:4d:d0:0f:bb:9a:1c:
51:65:ef:1f:8b:03:80:a2:da:6c:b2:91:95:32:92:18:dd:02:
25:c5:4f:47:d1:71:18:c8:c5:d8:90:34:02:89:b7:01:80:d2:
7c:8e:59:b6:78:de:45:e0:bb:10:a5:3c:69:e1:0f:93:24:74:
d0:4b:c3:55:c0:ed:a4:87:d4:80:97:f8:1c:ec:8b:ba:ab:97:
94:5c:f2:35:19:62:ff:6e:46:74:c1:c4:2f:6b:b4:c9:41:60:
5d:6a:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:40 2025 by rpki-client