Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/145604f3-de35-3e64-8618-9f1a089cf01e.roa
File: 145604f3-de35-3e64-8618-9f1a089cf01e.roa (raw, json)
Hash identifier: M6X6ptoXTNg/J4418R13H3VH9Us06Vxo29Wx8HddNI0=
Subject key identifier: 5D:6D:21:1B:7E:7E:84:90:E3:C0:E2:5A:8C:20:96:D0:10:11:E6:FD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840734AA2E53D2C9A2D64060100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/145604f3-de35-3e64-8618-9f1a089cf01e.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:4a:a2:e5:3d:2c:9a:2d:64:06:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=c2bfa87c-7843-410d-8f04-de85eb4055f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:78:d2:82:b8:be:2b:e3:16:2c:03:c4:63:
1e:a6:f6:95:d1:5b:4e:26:ab:fc:7c:b5:1a:4f:87:
8e:7d:64:b2:80:17:36:61:8b:39:f2:8e:56:41:87:
cf:c1:b8:ec:f6:09:b5:9b:05:30:e5:6e:17:2f:23:
bf:ef:00:7b:e9:f9:d4:db:e1:f0:45:76:35:3e:d0:
17:6b:55:f1:39:1e:9f:a4:dc:1d:57:0e:02:20:74:
b3:e0:1c:ca:6a:a9:08:b9:1c:1a:9d:fc:95:ca:3b:
7a:c7:c3:c4:6a:b9:63:99:9d:01:0f:35:d7:49:76:
6c:01:4b:34:63:30:48:ed:f0:eb:13:d4:26:7a:84:
3a:96:9a:0d:bc:36:69:f6:69:eb:07:ac:fb:3a:b8:
9e:7f:58:03:d3:32:00:59:6c:60:0a:c4:1c:d2:c4:
50:89:d1:94:3a:66:44:c9:01:26:66:ab:cc:b9:77:
4b:fa:dd:46:c2:b4:90:6f:95:2e:d4:1a:f2:8e:c4:
d6:04:01:48:97:2b:23:52:8d:b3:80:01:ae:8f:1f:
d6:8f:60:81:b8:8d:23:b2:69:74:b9:c0:83:4c:26:
3f:dd:ba:34:1d:3f:ed:ed:ce:e1:06:5a:ed:37:d0:
4e:6b:93:02:28:89:d0:5f:c7:62:23:10:2b:14:69:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6D:21:1B:7E:7E:84:90:E3:C0:E2:5A:8C:20:96:D0:10:11:E6:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/145604f3-de35-3e64-8618-9f1a089cf01e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:4f:c8:16:01:90:9e:e0:24:f7:6b:60:96:7e:b9:a2:b8:b4:
a5:96:95:8c:4b:e2:e7:57:62:c3:45:10:fd:a4:a7:0c:42:7d:
b3:4b:58:dd:ab:ba:99:c0:2f:ff:9a:dd:a3:00:e7:e6:0a:82:
e3:bc:fe:70:1f:7f:35:49:08:ec:ae:c1:5a:67:a0:76:82:53:
0a:51:51:87:63:da:1c:a2:68:2e:c1:a9:20:21:4a:d5:7d:56:
78:51:d4:96:b4:d2:24:f9:1f:64:86:bf:7c:8b:80:37:72:65:
4d:b3:2d:d3:ab:0b:56:11:23:f1:23:90:0f:b4:7a:ac:02:3e:
d4:6a:36:33:00:1d:ec:cb:6d:f0:d7:af:af:e9:84:7b:89:f1:
86:d7:44:f2:11:d8:56:60:5c:86:04:23:4d:79:ce:c8:44:d2:
31:e7:60:f5:b5:9a:b2:a5:66:1e:78:47:af:34:95:ef:5f:7c:
c9:16:2d:2b:ea:cc:a8:70:a6:2a:ff:2d:c6:72:0c:d1:4c:23:
25:a1:6a:e2:94:98:8b:ff:e3:f6:60:d9:dd:35:8d:f8:0b:8b:
3f:f2:58:e2:b6:bc:14:08:c5:24:9c:14:69:b8:ff:ee:f0:d7:
87:34:e6:83:1a:1a:fa:6f:e9:a5:42:f9:09:0c:35:59:fd:a0:
5c:81:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:13 2025 by rpki-client