Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ff5ada2-b05b-3a1a-9504-a7da52507788.roa
File: 2ff5ada2-b05b-3a1a-9504-a7da52507788.roa (raw, json)
Hash identifier: Yy3DZ14MpYe4R/vpoJNHBn0b0csod52L1O/Trg9l3E4=
Subject key identifier: 2B:09:86:62:25:1C:99:B9:1A:33:BA:F0:DE:49:E9:ED:02:DD:F4:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB599519D0299575C4AB781F0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ff5ada2-b05b-3a1a-9504-a7da52507788.roa
Signing time: Wed 26 Oct 2022 12:00:00 +0000
ROA not before: Wed 26 Oct 2022 12:00:00 +0000
ROA not after: Thu 01 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 56.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b5:99:51:9d:02:99:57:5c:4a:b7:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 26 12:00:00 2022 GMT
Not After : Dec 1 05:00:00 2022 GMT
Subject: CN=c534f476-e959-4721-b08e-7dce325c12d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:42:51:98:9e:a8:39:0d:ac:69:8c:99:06:
f6:1e:50:7e:4e:84:9a:a6:34:0e:68:89:7d:4b:a0:
5d:2b:07:13:0a:f5:75:ba:f9:7a:3e:e9:4b:f8:49:
db:a5:20:73:b5:16:b2:e1:ce:96:3b:6d:d9:db:5c:
61:59:ed:03:73:dc:fc:58:fe:af:82:66:65:b3:ea:
9e:20:d3:53:05:62:b9:1f:a8:5d:d3:86:95:54:be:
80:6a:13:ba:82:da:cc:4a:a3:49:a7:45:4c:a2:4d:
23:f4:aa:4d:18:5e:f2:15:4d:36:87:06:15:6e:a4:
3a:01:8a:d5:1d:c0:33:61:78:27:83:4d:b2:0d:94:
75:a2:48:9f:a9:65:f1:8b:b2:35:b4:ed:58:4d:e9:
89:e1:57:cb:52:9e:90:8f:86:0b:32:7e:de:57:c9:
d0:0c:f7:d7:b6:cc:07:1b:a3:f1:24:4f:27:4c:ea:
00:d4:07:a1:ff:cf:3d:28:f2:32:b1:00:2c:d9:d6:
77:23:da:da:6b:4a:c1:47:9f:e0:e0:f1:ab:cc:40:
35:ae:34:74:df:af:62:fe:cb:8d:cc:b4:c3:79:24:
0e:55:66:6f:ae:c2:eb:de:c2:d7:66:58:62:88:94:
67:4d:83:48:af:6d:5c:4b:79:8a:f8:9a:94:fc:8a:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:09:86:62:25:1C:99:B9:1A:33:BA:F0:DE:49:E9:ED:02:DD:F4:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ff5ada2-b05b-3a1a-9504-a7da52507788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:5d:af:c5:65:8a:f6:8a:20:66:ef:62:6c:f7:5d:a4:cb:36:
37:dd:16:96:1d:f2:63:96:f5:43:47:84:4a:29:ff:80:c7:12:
65:8d:4c:27:a4:8c:99:c0:f4:5a:7c:ee:a1:41:f8:4f:6e:91:
71:da:f7:58:86:40:15:e6:58:d4:04:81:19:43:ed:4d:cf:d9:
cc:4e:e9:36:aa:14:7e:fb:9a:df:0d:29:9e:b3:47:17:21:e1:
82:7f:ae:78:68:b1:e7:78:2a:ab:e5:23:e3:0f:03:76:17:57:
e4:35:d1:8b:63:ec:b6:6d:5d:1d:55:33:5f:7a:ce:77:d5:c4:
3c:44:87:fe:68:47:e9:bd:ad:17:6d:bd:bb:a3:49:ec:32:cc:
2c:76:7f:fd:07:45:95:e8:68:b7:0d:e8:7c:12:51:cc:2e:ad:
2a:ba:08:b1:4b:c8:58:c4:d5:3d:93:05:fd:f6:2b:2f:91:19:
1f:9c:27:37:e5:00:24:e3:07:67:31:ff:0b:b6:76:be:94:e6:
93:ff:7e:75:2f:52:5b:29:38:bf:29:4e:f0:5e:60:1a:52:71:
8e:40:d9:c9:c8:36:95:3d:75:f6:23:c3:89:21:4b:2f:18:e8:
3f:40:f7:ba:9f:16:a3:02:5f:4c:39:5c:95:29:22:8e:8d:0c:
14:dc:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:50 2025 by rpki-client