Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b0e3e78-d8ba-3469-9794-334bd0c670c5.roa
File: 2b0e3e78-d8ba-3469-9794-334bd0c670c5.roa (raw, json)
Hash identifier: QtFCBQRGhitKeV7Ici6JBTWrwAziIDcD6wAq4QfeOZ8=
Subject key identifier: CF:F5:32:42:54:5E:CF:66:BB:7A:29:89:94:5D:E8:89:41:DE:F1:02
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B090984414BF228B2D4DEA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b0e3e78-d8ba-3469-9794-334bd0c670c5.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:90:98:44:14:bf:22:8b:2d:4d:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=6f7f1f6d-2714-4f62-bf25-9c85b02c4546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:64:dd:f7:dd:cb:6f:ba:71:a6:71:7f:d1:
da:12:f6:ba:42:3c:0d:3a:e2:b0:43:fc:90:99:60:
f3:81:95:43:88:58:2e:52:42:5e:f1:c2:0a:df:4a:
2d:2c:8f:d5:36:e7:64:1c:16:ef:10:d3:62:6f:22:
35:12:c2:f1:a5:10:08:a2:67:3b:a6:fc:84:de:6b:
95:5d:34:c4:de:46:de:c1:34:54:26:28:36:f3:12:
60:41:b2:7e:65:5f:16:ee:ce:cb:d2:65:cd:d0:6c:
fc:e4:da:17:6c:81:b9:ed:9a:f1:60:52:20:f4:d8:
03:33:d8:0f:85:7e:3a:6b:12:54:30:63:ff:46:b4:
47:73:82:92:51:71:3c:bc:d1:07:4b:9a:93:56:72:
b9:39:84:c3:21:95:0d:20:4f:c2:28:3b:bb:77:c0:
28:98:73:c3:bd:ae:08:c1:b9:6b:e6:de:ff:01:f2:
79:d9:33:ce:d0:58:d9:03:f8:88:bd:a9:21:46:87:
3c:92:c2:46:a6:8f:8c:6a:e6:f8:02:66:1a:4d:d2:
23:30:e4:0f:b2:d3:e1:72:bc:96:9a:5d:3c:d8:00:
43:4e:84:f4:1a:b1:9f:11:45:1a:70:b5:89:b1:52:
8a:0c:77:e0:fd:53:1f:68:b4:3a:68:e3:b5:19:1e:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:32:42:54:5E:CF:66:BB:7A:29:89:94:5D:E8:89:41:DE:F1:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b0e3e78-d8ba-3469-9794-334bd0c670c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:e0:9f:7d:b4:35:70:5e:1d:9d:53:0b:cb:23:7b:d3:16:a2:
89:8c:f7:68:64:a9:67:eb:41:b5:3e:87:66:ee:c1:0c:e1:2d:
71:92:72:8f:cf:bb:06:ca:3f:54:3b:b4:94:1f:31:2f:af:f1:
f9:fb:39:e0:b7:d8:7d:25:a1:da:19:f8:4a:99:c0:e0:0e:89:
be:80:90:f1:5b:69:5d:f7:28:95:ad:1f:b4:38:94:b0:e3:9d:
5c:3e:49:7c:4a:b4:aa:57:65:4b:6f:bc:f8:1b:73:6a:1c:9f:
87:57:46:24:d1:6f:35:98:7c:77:4c:a9:75:4b:c8:91:58:6c:
b9:ef:0b:f0:6c:e9:60:57:03:7c:34:72:bc:63:06:f4:5a:0e:
b1:8b:03:1e:ca:eb:7b:a2:f7:46:93:07:db:17:01:1d:bd:e6:
3d:b7:63:ca:e9:e1:86:45:fb:ab:40:9f:00:fe:79:1a:2f:6a:
47:a6:73:1d:7d:64:cd:99:13:20:7a:ee:50:ff:b3:bc:3e:7e:
a2:7f:60:8c:11:3f:db:1c:a4:3a:c8:4d:45:7e:17:3d:19:b8:
17:07:c5:e4:f7:0a:43:2b:a0:e2:34:b3:d7:b5:7f:cb:ba:a7:
09:16:d3:e7:7e:7b:7e:30:67:2f:99:d8:47:9c:b6:12:49:a7:
32:ad:0f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:38 2025 by rpki-client