Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23ad38fd-a254-3cb6-800a-8bec8c9ebb25.roa
File: 23ad38fd-a254-3cb6-800a-8bec8c9ebb25.roa (raw, json)
Hash identifier: HGa5RVz2ZLHEIUJfNFqnysWKVe9wV5rkhklsEGHQXN8=
Subject key identifier: 28:DF:70:C9:AF:9C:AD:E8:39:68:2F:F2:16:C1:CE:12:84:1A:20:63
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B26C8375A299711E8051900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23ad38fd-a254-3cb6-800a-8bec8c9ebb25.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:26:c8:37:5a:29:97:11:e8:05:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=12e4b979-69b7-441c-86b4-67210db76538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:75:ba:b1:ad:26:bc:8b:6c:23:fc:c5:ce:58:
f3:7f:78:82:86:a8:eb:51:3e:96:b5:db:45:d6:29:
c1:db:1a:3d:bb:25:e0:b0:da:64:a2:bf:e9:28:6f:
5b:d4:1f:1a:c1:35:3d:0e:3a:fd:2f:1c:01:a2:ec:
54:a8:ec:e3:40:4c:29:28:4a:39:6c:aa:a1:13:be:
33:c1:02:ed:86:d2:c5:7f:83:69:d6:8c:ad:bd:4d:
df:20:05:08:03:a1:c9:3f:3c:39:bf:f6:4d:b3:ed:
50:52:39:d3:3c:f6:af:bf:3e:31:02:2c:29:3c:03:
74:28:51:e7:cc:4c:0f:be:e1:68:0d:bb:56:b1:ee:
51:19:77:a8:79:b3:ec:d0:1c:3d:cb:0c:c5:d2:3d:
00:68:41:f7:d9:a1:32:d1:e8:23:65:e4:95:fd:3a:
6d:5e:5f:67:b6:c1:12:52:59:d2:b5:84:7f:39:d7:
48:5b:18:4d:d5:92:d2:d7:65:88:e2:33:fa:99:a4:
70:75:54:d3:d1:7b:2d:08:47:4e:da:e8:fa:58:3c:
64:06:18:7d:9c:ea:9a:60:b5:c0:cd:a2:bf:5f:67:
a7:1a:d4:12:6b:e9:99:77:fb:ca:66:d5:fb:f9:13:
71:b7:cf:98:1b:71:20:dc:e5:ba:fe:4f:82:3a:23:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DF:70:C9:AF:9C:AD:E8:39:68:2F:F2:16:C1:CE:12:84:1A:20:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23ad38fd-a254-3cb6-800a-8bec8c9ebb25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:4c:32:37:e2:fc:e4:06:37:02:16:4d:23:d4:f8:e7:58:97:
03:9d:fe:3e:ab:58:cc:ae:c1:db:e3:f3:19:66:4e:1e:32:6d:
6d:e1:5a:5a:ee:33:cd:78:2a:7a:c5:83:5b:ce:34:05:7b:cd:
32:d7:55:28:9d:cd:89:43:40:a3:46:2b:f2:15:00:f5:67:da:
9e:fe:f0:f0:c9:7f:1a:1a:aa:b7:2a:6d:2a:0c:41:bc:26:7d:
1e:5d:42:4d:54:2a:1b:a1:74:dc:d8:58:ca:41:12:7d:ba:d5:
3e:bf:14:67:23:6f:99:da:c5:1a:55:a1:42:a2:46:c4:30:d6:
0f:49:52:34:9a:c8:3d:c9:65:65:19:96:7b:a8:c8:df:08:f6:
17:72:a0:cf:62:ec:54:a2:ac:86:ec:0c:44:65:e0:bf:e5:e5:
35:b9:40:e6:17:85:a4:e2:c4:25:7d:61:c4:0b:7d:ea:ed:87:
6b:73:b5:5c:1e:f3:05:e9:65:fd:44:d0:59:98:c1:a9:17:15:
55:b6:8f:62:0a:14:fe:ff:08:64:cb:f2:ff:55:04:2e:5e:69:
62:17:30:26:27:74:69:58:83:db:0a:b3:16:fd:35:2e:d6:97:
bf:d4:af:f2:aa:fa:da:a5:94:42:2f:b2:3d:a1:30:8b:c0:d0:
a2:14:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:15 2025 by rpki-client