Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a9b37e7-dba3-37c4-8fcd-719a222bfeda.roa
File: 0a9b37e7-dba3-37c4-8fcd-719a222bfeda.roa (raw, json)
Hash identifier: jNMio0TmB+OyvBNqWmeIHQS0VlPpTBiDAw65wlZS93M=
Subject key identifier: 33:27:CC:50:69:41:A2:8B:EC:36:B9:31:C7:F5:CB:7A:C3:42:18:34
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DC86C2B65F6F1572E4D9F1A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a9b37e7-dba3-37c4-8fcd-719a222bfeda.roa
Signing time: Mon 02 May 2022 12:00:00 +0000
ROA not before: Mon 02 May 2022 12:00:00 +0000
ROA not after: Tue 07 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 56.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:6c:2b:65:f6:f1:57:2e:4d:9f:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 2 12:00:00 2022 GMT
Not After : Jun 7 04:00:00 2022 GMT
Subject: CN=5a41bac9-cffc-44af-9446-2ad69047fb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:2a:68:d5:b9:86:64:d2:bd:ce:9e:aa:f7:
72:04:10:d2:ae:fd:3f:d8:ab:15:fc:fc:9d:03:9e:
77:13:73:0f:86:5f:a2:33:d1:b3:bc:e7:82:48:2a:
35:03:4b:f7:56:4d:7e:6f:28:b8:a5:54:14:fe:bf:
10:eb:a4:36:b0:58:db:9a:d3:79:84:39:53:27:74:
50:3a:90:df:51:e9:80:c0:57:4e:97:27:08:6d:0a:
6e:66:e2:c6:2d:d8:3a:dc:87:a7:4e:87:5e:a8:1f:
6f:0b:8e:aa:61:2a:d1:d0:32:b4:0b:11:24:e0:88:
f4:f4:b6:b7:bb:a4:4e:1c:7d:74:27:d9:e3:8d:7b:
4e:14:0d:95:d1:68:82:9e:65:3a:dc:14:eb:08:78:
8e:f6:59:10:2b:c5:24:97:d6:e1:15:e5:14:4c:70:
a7:63:7e:7d:c7:d1:de:29:48:21:b7:99:b2:73:11:
a8:ba:b5:7a:a4:d7:e2:d9:34:5d:4a:fb:af:3b:91:
f5:ec:b4:ef:76:2f:2d:fe:4c:70:7b:13:0c:ee:a6:
38:58:2d:a8:9f:03:f6:eb:8a:8c:35:94:49:0e:a6:
26:75:ba:0f:9c:9a:e5:19:67:b3:99:54:36:88:2c:
ec:5a:c6:66:5a:a3:43:d1:07:18:37:1f:c8:a1:04:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:CC:50:69:41:A2:8B:EC:36:B9:31:C7:F5:CB:7A:C3:42:18:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a9b37e7-dba3-37c4-8fcd-719a222bfeda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:6f:ea:17:d3:46:95:63:b9:80:1b:af:2b:82:11:32:a4:89:
27:39:29:1c:67:5b:27:0b:93:89:cb:89:0b:45:a5:e3:d8:91:
ca:80:5e:ec:86:76:e5:cc:03:53:3b:18:35:ca:48:8a:fe:a0:
cd:e0:59:02:30:f4:19:d6:52:8f:21:cb:64:f3:30:1d:84:f4:
7a:e3:c0:f3:b3:29:42:8e:1d:83:61:01:db:e0:b1:b6:ba:f6:
80:9f:e5:76:f1:01:01:73:1b:b0:6e:28:97:f6:a2:3b:f9:df:
6e:67:68:28:8d:ff:26:e9:08:80:4d:f7:56:b8:5d:a0:f4:05:
a1:45:bd:0d:1b:07:1d:19:a7:5c:18:1e:3b:a0:00:bc:7a:3c:
51:fd:31:cf:ce:62:00:a7:da:fc:f0:7c:5b:db:19:6c:01:45:
dc:90:13:09:5a:fb:67:58:24:b0:b8:27:84:72:8b:a2:3f:34:
98:3b:15:80:5b:20:b7:68:c0:25:e5:15:72:06:0b:76:34:e3:
13:bd:9a:b1:6e:03:1d:a4:b5:1f:7a:2d:03:09:31:6a:3d:30:
de:7d:54:5e:b5:09:b7:e9:62:aa:0d:c8:59:b7:c9:d6:e4:b6:
07:bc:42:b2:05:00:e7:b3:70:d8:dc:88:9c:c9:97:2c:12:95:
59:94:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:57 2025 by rpki-client