Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d2a4d49-41ea-3edb-8711-3c7a8f66848c.roa
File: 2d2a4d49-41ea-3edb-8711-3c7a8f66848c.roa (raw, json)
Hash identifier: 4OvNm9AHpqqbg53pA9qzm1/D2Xka0TRebhF0sYuAmPY=
Subject key identifier: 74:7E:E7:1A:1E:3B:B1:A6:D4:98:C8:9B:9D:3B:68:03:2E:70:47:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409F166453454B9BD2873A7180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d2a4d49-41ea-3edb-8711-3c7a8f66848c.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9f:16:64:53:45:4b:9b:d2:87:3a:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=12cd2a9b-9b22-45d9-bd8d-ebc9787757a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:f8:0b:ee:85:59:55:46:3b:cf:89:17:8e:
f7:3b:fa:49:58:ed:23:a5:7c:d5:9b:a3:33:98:f3:
99:00:67:47:6c:60:d8:cb:ca:2e:60:ba:42:4c:22:
8f:7b:44:9b:b7:0f:7f:c6:df:1d:20:71:79:5b:28:
9f:d7:ba:cf:c4:4d:7f:32:37:44:76:10:ac:37:2d:
77:67:ff:3b:89:0f:00:1a:7e:fc:a7:62:74:de:f5:
e9:e7:d1:bf:61:e6:46:bb:92:55:71:de:76:e9:b6:
ab:15:6f:9f:49:04:1b:3a:ef:8c:5a:b6:a7:9a:93:
61:9b:89:86:e5:9b:0b:38:68:f4:70:cc:4d:34:f8:
f7:65:c4:c4:dd:10:6f:0a:e7:f5:bf:a7:7c:ee:13:
cd:7f:ad:44:1b:58:2f:a4:f0:19:ac:6a:21:2b:7a:
1a:9d:0e:a3:2a:27:20:44:d9:64:07:66:fb:e2:b6:
34:23:e8:b3:f6:1b:9c:0a:7b:49:1d:2d:18:48:db:
fe:e3:dc:53:b5:10:31:50:ea:a8:9c:3e:9d:05:2f:
b6:78:d1:cb:10:6c:2c:21:75:08:77:5a:27:a2:c7:
2d:d9:36:2e:07:af:10:75:1b:87:0a:e7:92:62:05:
28:54:55:2c:66:1e:12:76:54:25:7f:ee:54:1c:67:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7E:E7:1A:1E:3B:B1:A6:D4:98:C8:9B:9D:3B:68:03:2E:70:47:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d2a4d49-41ea-3edb-8711-3c7a8f66848c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:51:1e:11:b6:fa:9f:76:54:af:5c:cc:36:72:f8:93:44:ab:
1f:bd:0a:18:51:69:4a:ff:ba:06:b2:94:6c:c8:90:08:90:e6:
95:c9:f1:8d:1d:48:00:7c:1f:52:06:0a:b0:e2:65:8f:c7:34:
ba:57:4a:01:32:12:17:15:a6:a0:70:e4:06:05:fb:95:34:e7:
0b:db:62:73:62:8d:06:8f:8c:da:d7:9b:34:91:00:17:45:99:
ca:72:e6:65:8c:32:92:d7:b8:f1:1c:e2:e3:63:e5:1c:25:2b:
17:41:05:75:48:1f:bf:d1:5a:cd:74:9f:a8:3a:77:ed:68:a8:
14:3d:fa:58:c4:2c:ff:ea:df:e1:58:00:f0:0f:1d:1d:8d:65:
48:50:6e:5d:ad:2d:a6:69:52:d4:30:40:7a:70:e5:77:c0:3f:
46:a9:f8:3a:45:ab:02:86:c6:9f:9f:a5:db:5f:0b:b6:fc:08:
e7:5a:56:2b:e8:28:d4:8a:34:68:40:ab:0f:92:22:95:ce:46:
15:d1:9e:8d:47:0a:13:6c:f0:60:1b:4e:d6:92:85:a1:e9:57:
d3:4a:fc:6f:a4:cd:82:ed:3a:b0:d3:f4:e5:a5:0c:e7:06:5e:
d2:b1:f1:05:af:87:81:10:0d:61:3b:20:50:59:cf:91:1a:9c:
ed:ee:35:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:25 2025 by rpki-client