Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0dd29725-ba67-3c3c-9a2a-bce9f9c1906a.roa
File: 0dd29725-ba67-3c3c-9a2a-bce9f9c1906a.roa (raw, json)
Hash identifier: EVkYiNxrI3Szh/oyMrUkrUHcN4XQOuWDVujrJkdbKXM=
Subject key identifier: 1D:F5:FB:F8:B2:BB:F9:20:FD:D5:00:10:FF:D0:14:8D:55:32:C8:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B35CE6E8DD101FD19A4DE20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0dd29725-ba67-3c3c-9a2a-bce9f9c1906a.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.236.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:35:ce:6e:8d:d1:01:fd:19:a4:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=ca636e15-c306-4a3d-aadd-2c94fc0548d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:4e:16:b0:a5:78:e5:78:07:0c:b6:f5:dc:
9d:d2:a1:a6:81:6a:21:e9:13:1a:e6:0f:33:57:49:
1e:87:f4:6d:cd:bc:3e:f6:67:31:e2:5f:f3:f6:44:
ca:aa:7e:97:83:ed:af:25:a9:84:87:7c:61:d5:a3:
b2:74:91:8d:ff:1f:b4:30:48:78:63:43:da:99:31:
2a:01:a5:ec:f8:78:ea:44:31:70:88:61:4a:3f:f4:
d0:9d:5e:00:2f:bd:13:dd:91:e8:f8:14:9e:72:62:
60:3d:8d:11:a3:81:0c:a7:75:f9:52:3c:34:1a:33:
a2:60:4d:45:34:53:7f:68:d0:06:09:f4:a8:57:dc:
5c:7c:c5:3f:01:6a:3c:1d:f3:cc:01:bb:4c:bc:bb:
df:a9:84:f1:63:d2:01:4a:57:85:30:61:cd:92:84:
22:21:d1:2a:6a:22:70:2a:e6:db:01:d7:a5:03:99:
41:52:4b:5b:ac:ad:6d:02:25:6d:4b:f5:ba:6c:c9:
5a:8a:fb:e4:cc:b2:6c:36:da:d1:a8:a8:c1:e3:36:
13:f0:40:d1:f4:fd:31:c3:89:fd:65:f0:8c:4d:67:
9a:8b:fe:b0:b0:8b:bd:bd:95:2a:b6:93:03:da:94:
e2:bb:a0:ea:cd:2f:f9:80:53:e4:8f:e3:9c:6e:3b:
70:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:FB:F8:B2:BB:F9:20:FD:D5:00:10:FF:D0:14:8D:55:32:C8:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0dd29725-ba67-3c3c-9a2a-bce9f9c1906a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.236.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:9e:e6:f7:ec:39:fc:4b:8a:82:24:da:eb:9b:c8:d6:5f:9c:
d6:9b:c0:5a:cd:04:84:38:73:22:ea:57:1f:b5:fd:74:d8:3f:
b9:56:3b:5c:b1:86:12:dc:bf:82:3a:8d:53:52:64:44:6f:9d:
21:b0:95:b8:24:81:20:79:e8:6b:a1:d8:d4:38:9f:d2:1c:7e:
27:7f:9a:85:55:5a:31:50:87:61:b6:e3:2f:8a:56:a2:2c:de:
71:af:17:89:2d:f1:f8:51:f7:3a:d2:54:4e:e2:68:72:07:73:
6e:0e:e4:b3:4f:6a:dd:d4:b3:6c:34:69:ba:d3:01:5c:9e:86:
29:3a:25:b4:c2:e5:f7:84:87:6d:7b:b5:89:a4:53:a0:21:95:
5a:17:6c:99:d8:36:f3:7d:b8:d1:d3:45:31:9b:e9:cc:97:c9:
38:16:04:ad:4d:df:63:55:dc:85:49:6e:1d:16:36:0d:c9:9d:
6b:e9:2d:b7:d4:a8:8c:44:b5:f4:60:96:e2:f1:e1:2f:d3:c8:
40:98:b6:fa:e1:ea:7c:25:0d:95:72:e3:49:1a:9b:d3:bc:0c:
e1:42:9d:d6:23:73:1b:e0:85:b9:56:ce:fe:58:4c:d8:99:cb:
df:f1:25:ae:d9:c7:33:be:4b:88:7c:ec:8f:63:b7:ea:0e:c3:
09:c5:11:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:59 2025 by rpki-client