Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/286f5ff5-4a85-38f6-8748-56fe2a3b8da4.roa
File: 286f5ff5-4a85-38f6-8748-56fe2a3b8da4.roa (raw, json)
Hash identifier: GrTqXAGPIdqzeDs2k2QX6YWZcXwMq8PQmxGIu7eHESA=
Subject key identifier: C0:27:6C:E3:90:17:87:42:62:26:AE:61:72:4A:57:79:82:C9:76:F4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C1E5B620B3368BF369EFBFC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/286f5ff5-4a85-38f6-8748-56fe2a3b8da4.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:e5:b6:20:b3:36:8b:f3:69:ef:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=5983e987-6aff-4361-84f7-15bb7685fd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:ed:5c:eb:e7:8f:d4:28:02:11:b4:c9:af:
c7:ca:13:1b:2c:df:6f:48:95:f0:a4:0e:f4:d1:ab:
38:d1:06:18:13:af:c9:ea:b8:f8:17:67:0d:8f:68:
22:3a:26:1e:04:09:ef:c3:d6:b0:91:49:3f:7d:aa:
ba:52:13:cb:2a:25:56:46:b4:b0:d4:f3:d3:a1:d3:
ed:6f:0c:b5:5d:84:3f:f8:ae:6e:ae:43:97:ae:09:
b6:24:f6:20:70:26:0b:a1:49:d6:30:2d:d1:0b:8f:
0d:0d:b4:e6:df:ae:a5:7b:85:6f:e1:02:09:75:29:
01:66:34:c4:83:59:d6:09:55:e4:29:04:12:5b:14:
0e:46:ce:72:1b:f6:63:fe:03:0b:87:45:ce:6e:e8:
af:2d:f1:8c:3f:a2:f8:ae:2f:98:ef:21:1c:4f:c6:
86:95:97:85:0a:b9:3c:4a:7c:16:f2:a2:bb:83:48:
ca:12:c3:0c:ec:b4:e7:19:5e:ce:65:5e:54:a3:7f:
dd:a7:e5:d9:ad:c7:03:49:42:3d:f4:ba:9d:aa:a1:
b1:24:cc:eb:26:08:36:a5:3c:3f:c9:e1:02:9c:be:
ea:6f:d3:6b:b9:1b:5f:17:e3:38:a2:31:b5:38:10:
c3:8c:da:cc:35:ec:35:4f:78:6c:44:8b:09:ef:0f:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:6C:E3:90:17:87:42:62:26:AE:61:72:4A:57:79:82:C9:76:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/286f5ff5-4a85-38f6-8748-56fe2a3b8da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:25:ed:5e:d3:49:b1:1c:e6:cd:5d:ad:03:83:d7:92:7c:a6:
67:bd:32:d9:c1:97:23:18:83:95:72:e8:92:58:16:4c:b1:fc:
52:ca:c6:a1:d7:4a:5a:ba:d4:a8:72:05:f0:d8:20:a2:1b:84:
c5:ea:29:5d:14:f8:71:3b:d6:3c:25:eb:26:7a:8c:57:7f:5c:
72:04:9f:9f:87:69:d3:73:e0:1e:89:a9:fd:3e:31:0e:a1:c3:
10:2f:1b:bd:f0:9c:5b:d6:34:26:4e:d5:c8:2f:23:7b:7b:13:
9c:2a:e5:42:37:63:84:0a:90:99:63:0c:c6:4f:e9:7b:69:05:
eb:21:01:f6:51:4e:e9:b8:a3:0d:a4:0f:d5:d6:08:03:d6:2d:
27:2c:86:c0:43:82:c4:29:90:a8:3d:db:d6:69:48:c8:11:74:
cd:93:ba:b3:c8:db:ee:7c:d5:7d:18:74:53:1a:d4:1f:2b:56:
06:34:d1:50:2e:b3:3b:9e:b4:c9:77:83:dd:cc:0c:b4:73:92:
60:4c:d6:72:18:76:9a:14:6e:91:50:4b:7f:1a:e6:d4:10:f1:
ae:58:36:83:a5:07:d3:b7:94:84:12:d2:c2:22:e5:3a:c1:6c:
39:ec:99:7b:51:27:6d:a8:df:b2:9b:f4:7e:22:be:73:3c:41:
55:29:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:16:42 2025 by rpki-client