Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a36c5d6-f261-3c9f-85db-5e3def6f4baa.roa
File: 0a36c5d6-f261-3c9f-85db-5e3def6f4baa.roa (raw, json)
Hash identifier: iFAP5s57tacJ+tmvyW0zRRPJXbYcGlYiCe2Wgy0EHiI=
Subject key identifier: 0E:68:D5:DC:51:7E:9A:0F:7D:9C:C9:33:53:F5:5A:7E:1D:45:59:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F015BBE81F869C73AAAEC1C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a36c5d6-f261-3c9f-85db-5e3def6f4baa.roa
Signing time: Tue 23 Aug 2022 12:00:00 +0000
ROA not before: Tue 23 Aug 2022 12:00:00 +0000
ROA not after: Wed 28 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 56.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:01:5b:be:81:f8:69:c7:3a:aa:ec:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 23 12:00:00 2022 GMT
Not After : Sep 28 04:00:00 2022 GMT
Subject: CN=f215870d-1eea-4e56-9685-04bcf500aed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:e9:2b:05:78:04:48:c8:47:87:3a:a3:03:
9d:4c:7b:23:a8:95:b4:d9:8c:96:a6:47:3f:52:f5:
30:31:c4:43:89:55:91:6e:91:4e:26:f1:e6:5a:ab:
64:0b:f7:72:73:0d:fc:db:a6:b9:29:54:a3:58:dd:
2a:c9:10:98:5b:1f:9b:f3:0e:4c:ce:30:8f:d4:79:
1b:22:70:14:9f:ed:16:5a:50:f4:21:08:23:4d:16:
11:49:73:95:64:c7:94:bf:8a:00:c5:ff:b0:0d:86:
3b:af:d4:98:6a:2b:d2:ea:49:9f:db:f5:3d:93:a5:
5f:55:eb:8d:d5:9f:bd:47:e2:80:79:7f:44:95:75:
db:8c:6b:cf:63:74:78:e0:48:ec:2f:80:e4:1e:96:
06:a1:5c:a4:d2:0d:2f:cc:72:4b:49:d5:18:dc:66:
6a:41:cd:cb:38:05:7a:c0:b6:4b:5b:00:fc:49:0c:
84:00:93:6d:89:e4:75:14:e4:5c:d9:5a:c0:7f:e0:
06:19:5b:70:b8:9d:95:a9:19:a4:52:c8:16:98:3f:
9f:16:81:72:5d:35:fa:f7:bb:07:4d:55:f4:a2:c9:
58:79:45:f4:81:95:f2:ae:bc:11:81:07:0d:31:63:
c2:87:08:11:ee:af:51:7c:29:0e:26:23:2b:44:19:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:D5:DC:51:7E:9A:0F:7D:9C:C9:33:53:F5:5A:7E:1D:45:59:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a36c5d6-f261-3c9f-85db-5e3def6f4baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.234.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:5d:17:ff:c8:e1:6d:df:2b:4f:51:de:0a:72:e5:02:de:75:
1f:27:ca:54:72:66:93:c6:00:a1:85:86:f0:af:5e:50:84:1a:
65:9c:a6:6f:79:68:2a:b3:86:91:c4:35:28:73:a6:60:8b:61:
40:54:87:b3:d3:fb:49:8d:ac:21:10:04:c8:6d:58:0d:8a:2b:
9e:de:69:ea:39:50:97:b5:de:2c:64:81:0f:b6:0b:eb:a8:9a:
c4:98:bb:b3:6d:ca:75:89:7b:74:cf:a9:60:67:08:2e:0f:6f:
4b:20:29:a7:d6:95:55:b7:5e:d2:98:57:c4:a5:b5:c5:43:b2:
2f:c0:1d:af:2e:4b:18:e8:a3:f9:11:f1:3a:ef:fe:b1:ba:01:
04:20:be:c6:10:5b:9e:31:de:d0:43:79:43:a1:e3:d7:37:fb:
98:aa:6c:88:bc:d9:f4:f5:9f:5a:03:19:91:d7:6e:87:46:16:
6c:ce:f4:2b:5d:fa:05:19:a2:08:d8:dd:ee:f3:a2:0b:b4:da:
e0:ea:30:5e:a1:ea:db:d3:cb:33:13:62:56:49:92:ce:c6:2b:
9c:cf:77:cf:92:58:eb:58:4b:5c:aa:ad:e8:24:2d:d0:b7:b9:
d6:d9:6f:0a:00:b9:b4:42:b6:a6:8b:2c:40:b9:c9:38:7b:24:
0d:2d:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:06:13 2025 by rpki-client