Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a4231d1-9e13-3681-aa4a-16f9492a392f.roa
File: 2a4231d1-9e13-3681-aa4a-16f9492a392f.roa (raw, json)
Hash identifier: tVhil4k5gLvAiWRT/JAQ6Cp//DtDG8Y1nzQ5LoH43QY=
Subject key identifier: A3:37:D0:1F:66:E4:04:2C:10:E5:32:42:7A:2A:AA:6A:21:9A:9D:56
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F9D8B993E770442E44B3880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a4231d1-9e13-3681-aa4a-16f9492a392f.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 104.255.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:9d:8b:99:3e:77:04:42:e4:4b:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=3544e9b4-bb96-4dde-98dc-7b11be1e92fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:b0:58:76:15:df:4d:6e:ee:ff:a1:a9:63:
00:dc:b9:10:fa:b6:0b:3e:7a:3d:7c:d8:30:5b:99:
85:eb:45:4e:b3:5f:b2:80:64:91:09:5e:c7:47:06:
cc:cc:63:00:a2:68:ba:38:aa:60:82:5b:02:49:07:
92:ef:e8:ad:c3:1c:00:8c:23:b4:94:5f:c4:96:0e:
de:d4:67:60:17:2a:63:39:f3:1c:15:46:97:b1:57:
9f:b3:d6:d5:92:fb:b5:cc:91:1e:de:12:66:82:60:
7d:66:6d:79:5f:d7:3f:08:f6:bd:e3:13:c8:2b:06:
cb:d5:5f:a3:f0:21:58:50:21:9b:4e:f7:a2:ef:81:
08:29:cd:4b:40:1d:b8:28:6e:d9:24:71:9e:e2:c6:
25:08:f8:82:ff:95:1b:14:e7:89:9f:6b:06:40:b0:
72:6c:9b:90:77:a8:bb:8c:3a:db:72:ef:38:ee:86:
4b:da:d6:13:ee:16:57:40:63:76:a4:60:78:46:d1:
f3:25:b7:bd:d0:c6:65:a7:5a:c0:3a:85:7c:7f:a1:
9c:db:3d:81:90:53:4d:c8:8b:7b:45:75:d4:af:74:
7d:08:41:b0:49:79:7f:a9:a4:01:34:b5:99:1a:54:
04:c4:a0:f4:75:c3:a1:3c:74:f1:da:55:27:41:48:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:D0:1F:66:E4:04:2C:10:E5:32:42:7A:2A:AA:6A:21:9A:9D:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a4231d1-9e13-3681-aa4a-16f9492a392f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:29:83:bc:b4:99:f2:dc:ef:d0:bb:d6:af:68:56:95:a6:88:
c1:82:16:2c:8a:6e:f0:a8:2e:49:cb:0d:6e:a4:3e:73:05:86:
8c:d1:04:a1:2b:6b:6f:91:d7:ce:89:ef:45:40:e6:c9:c4:41:
5f:f3:58:91:ee:aa:53:3a:9f:1b:75:66:8b:bf:f2:bf:25:91:
de:27:35:60:5a:2e:13:ed:38:89:70:9d:a7:f0:32:a7:65:c8:
af:95:a0:44:39:68:25:69:e5:57:a1:88:7c:59:b7:3b:f3:ba:
bf:cb:18:57:22:e1:d1:f4:00:84:c5:16:90:9f:f5:0e:2e:e2:
4b:49:07:a6:20:35:a3:59:45:71:e9:0e:c6:35:e2:91:50:30:
85:bb:79:62:bc:77:7f:e4:03:6f:46:99:a9:5d:23:fc:b9:d5:
6d:dd:1d:85:96:b9:c4:34:a3:51:cf:4b:f4:ea:c9:1f:34:c7:
a7:e0:d3:c3:e2:02:88:00:6f:4f:ab:d0:77:f9:b9:15:53:21:
2b:5a:b8:54:85:8a:3a:4a:05:a5:94:8c:74:97:26:d2:b0:61:
dd:ef:67:9b:a4:db:90:f0:e8:af:d8:2c:d6:1b:4f:bb:8d:5e:
cb:c4:ec:b0:d7:3e:e5:14:52:f5:88:db:d5:f9:78:81:04:19:
93:6d:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:23 2025 by rpki-client