Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ec23112-2b76-33d7-aa65-a493b0d18980.roa
File: 2ec23112-2b76-33d7-aa65-a493b0d18980.roa (raw, json)
Hash identifier: 9oGuQoBqLCGQrUBtQjttdJhFW6m/8xKI4rmyh7TUtmg=
Subject key identifier: AB:78:28:EF:D7:BC:A0:58:7C:C6:93:C9:C1:1C:42:F3:1A:98:30:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402A09C3EA7FD935C70D91F7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ec23112-2b76-33d7-aa65-a493b0d18980.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:09:c3:ea:7f:d9:35:c7:0d:91:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=e179b337-3014-417d-956b-86f2d268752b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:7c:59:2d:73:d2:1d:fa:1d:bf:e7:56:1e:
83:fc:9f:71:31:1e:cc:b4:d1:19:da:22:e4:ac:40:
2e:f5:be:e2:13:58:56:d5:20:4f:7d:38:5d:4f:15:
93:b3:63:a8:9a:24:1e:10:34:0d:28:e3:85:31:17:
de:63:cf:0c:0c:21:99:42:ce:78:c6:a1:d4:ac:9b:
e6:88:4c:68:96:43:8e:77:a3:1c:df:4d:8a:87:30:
41:93:62:64:67:65:57:81:d3:27:ee:5b:97:e9:c5:
4f:f2:ad:bc:d9:b5:64:9f:8c:d7:38:84:cc:8c:7b:
99:ff:1f:c3:14:35:1d:8b:5e:41:5c:dd:2d:cb:86:
40:69:92:77:b3:69:b4:fe:19:68:c6:81:7f:d3:47:
3b:8f:6e:00:21:48:1a:bc:e3:f6:f7:7e:05:65:a7:
b9:bf:f8:16:dc:23:4e:e9:47:48:c6:06:a5:94:98:
54:53:e6:73:68:c5:d8:b6:1e:44:37:31:da:83:04:
df:dd:4d:de:b6:0f:46:5d:2c:72:35:24:22:72:8e:
0f:a7:1c:a0:50:2b:2a:b6:c2:a5:d7:9b:7b:51:c1:
f0:81:5c:bb:08:31:3d:a4:80:99:fa:4b:b9:85:7d:
8a:93:01:0b:26:2a:06:cd:5b:81:bd:5e:9f:97:8c:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:28:EF:D7:BC:A0:58:7C:C6:93:C9:C1:1C:42:F3:1A:98:30:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ec23112-2b76-33d7-aa65-a493b0d18980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:7d:83:ec:b3:0b:85:fc:8b:bf:e2:1e:70:c1:d7:de:74:71:
f2:67:3a:1e:50:f4:32:71:07:4e:fa:dd:12:67:5c:4b:04:05:
1c:3d:c1:42:58:66:85:5a:7c:2a:17:ca:24:ef:15:04:ec:f6:
13:75:fa:58:f7:55:5f:53:28:d7:79:e4:02:b8:2a:fb:2c:55:
26:09:61:eb:2b:5b:5f:fd:a1:fb:81:45:7d:63:4c:95:de:13:
25:f9:ac:90:74:97:07:c0:ff:a6:30:1e:0d:8b:fb:8f:50:5d:
91:b9:bc:90:57:3c:ed:b9:14:cd:8a:06:d0:09:f6:1e:e2:f9:
d5:a3:ca:73:7f:b6:b9:3d:1c:b2:19:ae:30:8b:dd:bb:46:b4:
9a:62:4c:66:38:78:4c:9f:08:2b:15:d9:33:d6:d1:ad:ae:27:
d2:f8:ea:c2:af:f7:ef:54:e1:03:f1:3c:1e:13:1d:6b:c0:f2:
8f:a3:46:1f:8c:5a:8f:ca:e3:a5:3a:77:51:ed:70:30:74:54:
ab:8a:7a:60:79:4e:37:06:da:f1:1e:de:8f:f1:99:73:ec:c5:
6c:71:97:13:d9:70:c4:ec:9a:28:34:40:bc:9c:9d:24:5f:f2:
d0:22:36:3a:71:2c:a3:23:d5:8c:f3:1f:1c:31:62:85:00:38:
98:42:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:09 2025 by rpki-client