Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a2ed91-18fc-3d53-b889-0deb4312d8b8.roa
File: 29a2ed91-18fc-3d53-b889-0deb4312d8b8.roa (raw, json)
Hash identifier: slHCarrTMXApfCh616Oqbbtj70WdEBPXJgaFJPTlyXw=
Subject key identifier: C7:E4:EF:33:05:CB:32:70:18:0D:06:45:96:3C:3E:E4:27:92:0B:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584027983C7D623944B769434B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a2ed91-18fc-3d53-b889-0deb4312d8b8.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:98:3c:7d:62:39:44:b7:69:43:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=8a2d998d-0a04-41ca-83f8-2cf018dda456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:19:a6:01:e4:06:58:d9:2c:ec:39:9b:7b:
b7:a9:8c:3f:67:83:15:9e:43:9b:58:2d:c1:83:8e:
80:cc:21:11:f1:68:18:51:3f:d7:af:69:39:d8:9a:
d1:75:cf:2a:de:89:eb:c5:72:84:b1:1e:28:63:66:
17:46:64:ec:49:af:9d:d7:22:a4:c7:5d:f2:51:84:
7b:09:ae:51:58:49:17:50:f3:69:09:fd:4f:5c:0c:
0e:e8:3e:a3:cb:67:27:fc:f3:10:1e:04:34:ff:4e:
98:c3:68:65:eb:c9:5b:07:a2:4e:03:78:d6:17:05:
d1:23:ab:99:42:a3:44:27:54:99:33:6d:68:44:7a:
fc:d5:7a:78:8c:aa:de:8f:76:1a:b9:75:f3:00:13:
c4:ee:9d:a0:33:76:fb:d4:eb:0e:44:7a:ee:86:7a:
52:09:96:f3:26:4a:07:e0:43:2c:77:80:2d:ba:f0:
c5:e1:8d:b5:22:5a:e8:d5:86:95:49:f6:36:20:cc:
ef:75:2b:c8:bf:0e:3a:d0:bd:b9:ac:e4:e2:63:c0:
94:3b:2f:77:56:77:d0:b6:03:cb:39:33:aa:1a:0e:
e7:f8:10:3c:1f:fa:8b:62:50:7d:f1:57:67:5d:4a:
7c:d8:dc:e2:a1:e0:93:bc:cd:0c:5a:7e:9f:7c:da:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:EF:33:05:CB:32:70:18:0D:06:45:96:3C:3E:E4:27:92:0B:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29a2ed91-18fc-3d53-b889-0deb4312d8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:21:67:67:a0:95:d6:7f:d5:be:9c:18:b7:f3:fb:fb:7d:fb:
5d:a7:54:30:56:63:13:89:ac:87:0c:4b:28:b4:14:3e:7c:76:
4c:41:3a:58:e7:51:8d:c7:61:82:89:d9:a7:ef:1e:cf:7a:e5:
e7:15:5c:96:80:e2:14:97:31:78:c8:62:2f:cd:b8:95:37:47:
79:27:be:19:6a:bf:5d:a9:d9:6d:6f:71:96:c4:9b:61:9f:51:
ee:58:c8:4d:69:0b:78:13:87:3e:c5:cf:ec:16:aa:4a:d3:8a:
63:f7:e7:de:0d:b6:ea:72:2c:6c:af:54:67:65:4f:46:54:fc:
f2:51:a9:f6:72:e6:e2:0b:ec:e5:48:ad:46:97:37:41:48:fc:
90:4c:a2:07:df:f4:85:b2:fb:c0:15:83:d0:21:b5:10:51:c0:
7b:28:bb:a4:92:99:40:b9:a0:b4:c7:6c:fa:99:51:7a:59:cd:
29:98:9a:41:e5:9a:26:72:af:ce:8b:29:8d:5f:a7:da:a7:d7:
69:9f:28:ec:e0:3a:45:6d:17:7c:0f:79:0e:78:6d:21:93:c4:
e5:e6:db:dd:61:78:6c:b3:a3:b0:e3:45:55:d2:27:a2:b3:a9:
ed:55:38:95:15:5b:61:85:38:18:d9:70:01:f1:ae:f5:ea:4f:
0e:4a:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:40 2025 by rpki-client