Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/203b9d5c-a24f-3d7e-b661-8b5ea27b6e9c.roa
File: 203b9d5c-a24f-3d7e-b661-8b5ea27b6e9c.roa (raw, json)
Hash identifier: uB9SnWkZW54PtIGKSrxY0Odp3vQNmL4ohjx4CJ9igZ8=
Subject key identifier: 6A:56:83:1B:75:7D:25:B2:3A:8F:E9:68:93:42:56:AB:B9:B6:67:C9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401432DFD11B2050FB08FDAE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/203b9d5c-a24f-3d7e-b661-8b5ea27b6e9c.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:14:32:df:d1:1b:20:50:fb:08:fd:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=1dc4c2da-3146-4886-9ce1-0a4e0905d545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:4a:29:ca:6a:46:19:f7:7e:7a:40:a2:f7:
e9:5c:fa:95:2d:d6:05:4e:6d:40:6e:32:db:87:9d:
e1:d2:c0:e3:e3:2a:fe:aa:78:1e:93:d2:95:50:43:
d9:f6:5e:06:08:1b:95:fb:d5:e8:fc:7a:0c:eb:0d:
5c:22:d7:30:f1:9b:93:34:b1:4b:ee:6b:36:dd:24:
77:83:08:29:ba:1d:7f:9b:8c:ad:64:d5:44:1c:38:
a1:39:38:42:d9:1f:0d:f8:be:3a:8d:65:aa:2a:76:
53:23:0c:01:10:85:0f:cb:87:d5:7b:52:a8:8e:22:
08:fa:87:ed:b3:a5:4b:67:49:75:09:69:5a:96:eb:
b0:72:62:d4:be:a1:dd:c9:f6:5b:6a:37:bc:74:cd:
ef:cb:9d:1d:07:9c:e6:c8:94:e9:6e:8f:05:c6:ee:
37:d3:2c:c4:22:2f:06:5b:71:2a:24:14:89:d0:b3:
ce:33:1a:72:8e:45:76:e0:1b:e4:a5:93:47:98:7b:
2b:d5:d9:bc:8e:3a:62:21:62:20:c0:2c:73:c7:34:
d3:50:fe:13:f4:3a:85:66:a8:70:a1:8f:da:06:82:
59:5b:9f:7a:14:a5:01:a7:15:32:7f:19:5e:23:f1:
fc:0f:46:da:3d:92:b8:de:1d:3d:1b:cc:64:81:6c:
7a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:56:83:1B:75:7D:25:B2:3A:8F:E9:68:93:42:56:AB:B9:B6:67:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/203b9d5c-a24f-3d7e-b661-8b5ea27b6e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:4d:58:bf:88:82:12:68:2b:41:86:d3:5d:a1:2e:62:c3:4a:
5d:eb:4f:b7:bb:47:16:3f:de:56:c2:60:87:7e:8a:2c:2c:80:
bf:04:7b:a6:28:81:24:50:2f:98:7a:cc:d4:b7:09:00:21:cd:
84:59:b5:70:15:3f:33:7f:b7:13:ac:13:76:d0:9a:fc:82:9a:
8c:9f:cb:81:83:d7:57:9b:56:37:83:9b:4f:72:fe:1e:e9:19:
a2:80:09:b2:1a:58:87:80:93:0c:07:a4:2a:2e:b3:16:d2:d4:
f6:b0:bb:c7:67:41:7e:69:16:be:6d:92:d2:c3:35:2f:8d:99:
b6:6d:29:65:7d:fa:17:f6:4c:b1:1f:0e:29:05:19:c8:9c:ed:
8c:71:62:4c:48:bc:37:f6:5a:5f:13:7a:58:f0:1e:eb:51:0c:
36:ec:57:6a:35:1f:30:9c:23:42:4e:8b:0b:97:11:4e:c2:bc:
61:6a:a9:18:b1:23:bd:d8:dd:44:e5:3c:f3:b9:b0:c1:8b:da:
89:79:ed:85:b6:9a:f6:5d:51:66:5a:a2:8f:61:f1:a4:f6:e6:
89:03:e1:ba:cc:bc:01:ea:51:fa:8b:ee:5b:66:64:b8:9e:ff:
1c:0f:43:07:a4:ce:27:09:29:4c:8b:e5:7a:b5:a1:cb:9d:a9:
0f:9c:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:54 2025 by rpki-client