Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d36bf10-8f72-385e-8b85-ddaebc6dd3d1.roa
File: 1d36bf10-8f72-385e-8b85-ddaebc6dd3d1.roa (raw, json)
Hash identifier: HZu5+2ieO55dshC9mR2d23RFQzO3wwHkzJdcAsUNFEA=
Subject key identifier: 86:B7:89:A7:27:1D:6E:83:6C:00:5E:91:EF:5F:4D:2A:B5:87:DF:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F75F588B6AA727D8D8FAB78C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d36bf10-8f72-385e-8b85-ddaebc6dd3d1.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 114.56.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:75:f5:88:b6:aa:72:7d:8d:8f:ab:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=249d5d27-97ae-4846-ba23-8a8c37c3a2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:d1:b2:81:8e:44:34:a8:ab:94:f3:6d:fb:
a2:26:48:d0:07:7c:03:48:61:13:e6:8f:e0:b7:b0:
2a:35:3f:69:60:f1:88:cc:a3:ed:ca:de:af:6b:42:
db:51:04:01:5b:46:ff:b0:11:48:e0:d9:c1:bf:57:
c6:8f:83:c1:ce:da:a6:2e:a3:90:fa:d0:2a:4e:0d:
54:44:35:87:1f:1d:a3:79:b0:22:59:eb:38:4c:93:
44:d4:9e:4c:9e:4a:b6:1b:21:90:a0:64:52:ca:ee:
5e:ee:c9:62:50:91:9d:9a:06:78:7c:eb:49:c0:a3:
16:4f:02:47:97:55:35:48:8f:8d:0f:4c:4b:cf:e4:
85:77:96:18:2b:c4:0d:34:14:f0:f7:2f:93:6e:d8:
a9:07:1c:c4:11:74:7c:2d:38:1c:b6:d0:38:31:a6:
c5:66:e6:9a:27:fa:15:00:f5:5f:25:b5:51:d4:d5:
f9:bf:c8:c3:c5:86:10:25:a0:24:99:86:ba:5d:4a:
fd:aa:ed:5a:b5:1a:ad:46:7a:a5:fe:d7:91:a6:ce:
cc:64:50:8f:32:cf:2b:06:f7:9a:db:43:0e:d4:cd:
ae:bd:c3:9e:07:15:04:b5:c7:d9:0e:44:d2:83:bc:
75:97:0d:a1:1e:a0:f0:b1:ef:2a:cc:29:97:f0:72:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B7:89:A7:27:1D:6E:83:6C:00:5E:91:EF:5F:4D:2A:B5:87:DF:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d36bf10-8f72-385e-8b85-ddaebc6dd3d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
114.56.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a5:b3:ec:f1:cc:96:38:63:7f:67:03:8b:bf:ce:5d:11:39:
d9:a9:c5:d3:a3:2d:13:10:42:df:b3:ee:91:ed:f2:8c:74:63:
35:93:62:92:3a:36:f6:24:53:85:6f:e9:f5:86:59:78:5c:73:
55:bf:c7:6c:ad:2f:a3:67:54:0f:35:c2:29:43:84:30:ae:2b:
d6:15:02:b8:83:1a:2a:0d:7d:75:e8:c0:b4:f1:88:31:4b:58:
95:97:be:05:99:ae:be:a4:1e:b5:96:fb:ca:74:92:72:2a:c1:
de:a2:32:ba:de:d2:cb:24:34:fa:5b:93:d6:16:de:a6:a2:6c:
97:5f:ca:09:f0:0f:8a:63:c4:de:d0:40:4b:06:e5:ed:9b:12:
01:0c:a3:f9:82:4c:5d:95:5d:75:e7:8f:13:d0:5a:c3:7d:02:
42:0b:7e:22:01:22:9b:39:cb:83:5f:6a:76:bd:57:29:d9:06:
a8:9a:08:30:52:ae:99:e1:0e:28:f1:9a:ba:d6:01:dc:b2:fe:
09:0b:63:b9:b7:5e:97:a4:aa:40:ec:fc:d1:1e:95:bc:6e:ec:
f1:4a:6c:67:65:23:94:a1:f4:4c:69:d1:f2:cf:dd:44:e5:f3:
e9:bb:c5:14:83:2a:49:ca:5f:bb:c0:5b:b5:24:18:4d:5e:22:
77:97:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:33 2025 by rpki-client