Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2428dd3c-8020-30e4-a732-ffc1e5a56586.roa
File: 2428dd3c-8020-30e4-a732-ffc1e5a56586.roa (raw, json)
Hash identifier: MRrsMXaYKbJnHrwpWKu/ZDVmHMMN/rLLXNt64Aj/K9M=
Subject key identifier: F6:23:FD:FE:60:BC:1B:FF:89:58:B7:FF:AC:37:11:C8:E8:68:D4:01
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840A031199D8999477B09D14E50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2428dd3c-8020-30e4-a732-ffc1e5a56586.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a0:31:19:9d:89:99:47:7b:09:d1:4e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=16f1f64b-2bce-4dee-8013-908f4038493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:48:a2:4a:da:4d:d1:81:a7:a7:28:11:d5:
04:0f:02:42:79:0f:a1:88:b3:01:76:39:a2:7b:4e:
0b:f9:b6:5b:00:8a:02:37:6b:99:dd:40:13:6c:54:
a5:d8:2a:be:5b:71:56:09:43:33:15:0a:5f:af:5f:
0b:46:05:1e:3e:a4:28:3b:90:9e:af:3d:1b:29:72:
10:c6:42:3e:ec:47:37:8d:00:56:75:2e:61:62:d0:
ea:ae:02:99:96:39:50:39:f1:74:6a:41:aa:63:8b:
cd:1d:a9:fd:2f:ac:3f:97:0a:d3:0d:7b:c4:b7:e9:
6c:3b:d3:0b:8d:1c:dc:76:f8:2e:c6:24:24:8e:b0:
a5:19:77:26:84:d5:d1:59:a2:7c:36:e5:5e:86:81:
8d:15:41:39:65:54:e8:35:ca:48:f7:d5:7f:d2:46:
3d:2f:20:20:b1:bf:a2:93:67:dc:92:5f:9d:a6:74:
15:47:68:4d:63:52:9e:31:97:e3:98:ee:1b:74:4e:
d5:a3:e5:19:86:d9:3d:d0:3b:e7:56:fa:ed:40:ca:
2b:06:4a:53:00:56:43:75:df:7f:6a:9c:51:d2:eb:
d2:94:ca:b1:38:de:ef:b2:af:93:87:07:db:f4:22:
2f:ab:de:2e:76:52:dc:6e:ba:72:3c:30:01:83:d8:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:23:FD:FE:60:BC:1B:FF:89:58:B7:FF:AC:37:11:C8:E8:68:D4:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2428dd3c-8020-30e4-a732-ffc1e5a56586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:cc:e1:7e:00:6e:6e:8b:01:98:87:17:3b:46:58:5b:4a:7b:
31:bb:32:1e:85:72:aa:ea:fc:2a:02:cb:ed:4d:69:eb:aa:57:
3b:28:54:d6:dc:8e:d0:58:a1:9c:51:d5:d6:15:de:dc:24:af:
bc:63:2d:15:16:0d:b2:13:04:cc:38:70:69:40:1d:93:27:62:
1e:cb:98:c2:e9:67:e8:e5:f5:49:fe:7f:1e:be:19:59:af:46:
a8:ad:65:72:d7:bf:37:3d:2f:53:be:75:f6:a9:60:75:9f:25:
32:bf:58:70:4d:db:6d:06:15:d2:a0:63:48:6d:9c:b2:b5:42:
4b:8d:1d:5c:f6:c9:5b:db:3c:3a:9d:75:0f:aa:fb:6c:81:cf:
bf:af:b0:0e:d7:e6:92:22:29:18:2f:4b:44:57:75:1a:f7:f9:
ec:2f:d3:a5:3f:b0:e3:07:e8:67:8e:1f:29:71:5d:cd:ec:71:
d9:15:05:44:ca:30:fa:86:f7:c8:73:6f:5c:97:eb:02:4e:97:
3e:0f:13:09:3e:ce:0f:c6:d4:a8:1a:38:97:23:f9:73:8e:24:
3b:c0:72:72:69:52:b9:31:c1:6d:50:63:ca:53:47:23:a4:24:
b1:85:ca:0d:bf:80:96:ed:05:60:a5:45:4b:7d:0c:ae:7f:dd:
86:04:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:02 2025 by rpki-client