Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/18406fe6-ba9e-3d92-9e81-96bf7ad60763.roa
File: 18406fe6-ba9e-3d92-9e81-96bf7ad60763.roa (raw, json)
Hash identifier: Bloykt+/xd7qkSPjtAywfLor3Zkusxxoa8EFXkhFZWw=
Subject key identifier: DC:8B:18:B6:79:A3:D7:AE:F0:C8:8F:77:57:DD:72:C0:00:7E:5C:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840138F2E026F5E6C321C054100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/18406fe6-ba9e-3d92-9e81-96bf7ad60763.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:8f:2e:02:6f:5e:6c:32:1c:05:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=aa1a2cf7-28ca-4e84-87bd-404f88a3a830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:a8:3b:a7:ba:d5:6b:19:eb:24:3d:28:59:
c0:f2:c8:bc:4c:58:f0:20:8c:49:72:9b:0d:78:5a:
c7:ae:b1:38:01:8d:60:87:23:af:a1:82:ac:84:fb:
8d:ad:c6:53:aa:1b:ff:29:a0:36:f6:d7:3a:b6:9e:
02:e7:56:36:22:2c:b8:a3:05:33:b1:73:18:9f:10:
f2:af:0d:c9:c7:7d:99:06:fb:4c:c0:92:bd:4b:8d:
cf:5d:25:0a:60:51:21:27:83:b7:2b:39:54:e5:fe:
67:db:f1:fb:99:1a:06:a7:da:ea:0c:4c:5e:30:a1:
13:ec:4b:5a:50:2e:54:ec:d9:ea:f2:96:79:a3:2e:
5b:d7:f1:3c:9a:13:92:4e:ad:f6:f4:03:9d:b9:78:
15:bc:3a:64:a8:3a:81:a0:85:7f:d8:6a:0d:bc:0d:
ab:db:0e:e3:e4:32:f5:a7:d1:cb:56:a2:7a:5b:2a:
e8:9c:eb:c8:a1:59:2f:c6:29:71:ff:95:d4:18:66:
c1:f9:f1:34:1a:36:88:b5:6b:a8:18:e2:84:49:c6:
9e:e9:69:08:5d:32:c3:27:7c:ff:08:ab:76:e1:21:
29:22:64:2a:6a:45:58:75:4d:e4:89:51:5d:42:3a:
85:c8:53:61:c7:f1:74:17:24:3d:d3:d3:6e:91:c5:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8B:18:B6:79:A3:D7:AE:F0:C8:8F:77:57:DD:72:C0:00:7E:5C:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/18406fe6-ba9e-3d92-9e81-96bf7ad60763.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.234.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:7f:d3:08:07:5f:f7:86:b8:f7:dc:37:9b:39:be:6f:dc:11:
42:44:85:01:d1:80:41:3c:15:42:40:d9:7e:47:ad:03:a3:be:
fb:96:74:8c:11:51:ac:10:ca:6f:8a:3f:13:7d:63:e0:29:bd:
c9:8f:60:3a:82:d6:86:04:d6:c0:f7:76:56:f7:46:69:b0:57:
03:4a:08:df:5c:c1:16:a7:6e:c1:87:8f:93:9a:3b:e8:4d:c0:
05:5d:1a:1e:30:51:ea:60:54:99:5c:91:30:ea:03:bc:a6:d5:
09:ac:91:3b:29:f3:34:ab:c8:8e:72:c4:80:56:68:85:27:c4:
ce:96:ec:c5:f9:9c:d6:23:37:78:db:a5:af:f5:3c:c6:d4:3a:
3d:6f:18:75:fd:7e:43:78:c5:17:4b:df:7c:4a:4c:a5:43:12:
71:0a:86:9c:5e:e8:a7:8d:5b:fe:3c:66:db:89:8a:7d:bb:76:
ac:8d:e2:63:d1:4f:51:6e:f3:42:75:82:c2:4f:43:e4:2a:9b:
22:93:b2:c8:6c:b3:f8:76:59:ef:fc:21:b9:ea:5e:54:c9:19:
6c:27:10:4b:57:e0:b7:28:19:45:f5:94:76:fb:42:97:19:34:
b0:2c:e8:1a:9b:46:ec:a8:08:f0:3a:6f:f1:38:5a:02:37:ab:
b0:36:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:38 2025 by rpki-client