Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3324a000-abd3-3c4b-80fd-49d96ecc4d65.roa
File: 3324a000-abd3-3c4b-80fd-49d96ecc4d65.roa (raw, json)
Hash identifier: XJcIntwqnMfgSEfADlOg3VKt/TkJpKyj8nLlm5y/4+o=
Subject key identifier: 9C:DE:00:C3:26:26:67:59:7A:52:CF:B4:52:FC:99:D8:FD:94:5A:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F286263E0EB01AD1A19E648C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3324a000-abd3-3c4b-80fd-49d96ecc4d65.roa
Signing time: Tue 06 Sep 2022 12:00:00 +0000
ROA not before: Tue 06 Sep 2022 12:00:00 +0000
ROA not after: Wed 12 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 56.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:28:62:63:e0:eb:01:ad:1a:19:e6:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 6 12:00:00 2022 GMT
Not After : Oct 12 04:00:00 2022 GMT
Subject: CN=2225f3ee-c954-4613-8044-12af3078e611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:dc:dd:8d:52:fd:44:5e:46:7e:42:36:61:
36:f2:72:f1:ae:b7:2f:33:12:51:fe:d6:ca:f3:6c:
3b:64:d2:28:11:0a:49:91:cb:32:c7:92:fd:10:75:
71:98:e3:05:5f:cf:e6:68:e8:65:cc:a1:53:cd:f6:
e6:9f:ed:ac:f3:08:00:65:83:63:73:5d:50:a0:db:
68:71:50:a0:1c:be:41:68:68:03:e4:76:d4:bf:0a:
3b:aa:e1:8f:32:a6:5d:cf:eb:d6:7d:9c:01:60:79:
8d:d3:1c:5b:b8:40:4c:c7:af:99:07:fe:9e:73:56:
0f:71:7d:59:e1:6e:72:fd:a6:11:2f:b1:b9:70:43:
65:26:67:fb:bd:a9:cb:c8:9c:06:c5:a3:71:6c:12:
c1:25:03:72:4b:7d:18:0a:80:f4:ea:2c:89:df:dd:
79:61:1c:f9:ff:93:f9:52:1f:2e:0c:50:d4:56:e6:
a0:c4:aa:db:a7:4f:20:ff:b0:d3:4f:d1:17:4a:bc:
39:e0:a0:55:03:80:66:8d:e5:dc:f4:bf:8a:59:15:
e3:90:35:46:d6:8d:f6:b6:61:1c:8b:d1:5a:3d:61:
88:e8:40:14:ef:82:8b:be:f8:ba:fe:25:9d:55:9a:
1f:23:58:08:12:9f:03:5b:75:d0:d0:cd:2e:3d:8b:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:00:C3:26:26:67:59:7A:52:CF:B4:52:FC:99:D8:FD:94:5A:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3324a000-abd3-3c4b-80fd-49d96ecc4d65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:cc:f8:41:9f:89:8c:08:b7:e7:69:c2:88:b2:e3:35:4e:07:
e6:56:f5:12:66:a9:98:d7:59:42:e9:fc:43:1b:66:f4:02:cf:
a2:c3:a1:f8:cc:aa:cf:b6:f4:6e:0b:a2:df:58:54:63:35:da:
1e:38:b1:f6:f0:bf:cc:47:7a:54:e9:60:83:f4:ed:6f:5f:c4:
f1:3f:b3:fe:89:ca:e2:fc:1e:61:16:65:12:a5:05:cd:28:b2:
df:0d:b2:9b:a2:cd:65:a9:a4:53:e1:03:17:0f:70:a2:c7:a5:
03:ec:54:dd:07:ee:d8:54:a0:88:34:ad:ec:61:ab:e8:3c:49:
0b:bc:ac:63:09:01:14:ed:79:66:86:8f:38:4d:8b:17:c6:62:
4d:cb:ca:57:ef:09:74:fa:6e:2a:34:f8:47:be:c1:ec:fb:e7:
17:31:0b:e8:6b:dc:5b:18:e0:08:15:5d:83:aa:84:93:c9:3b:
ad:2a:51:0d:03:f6:f7:54:97:34:22:c1:1b:50:5f:6f:a7:3a:
30:92:48:82:10:67:32:12:9d:43:7f:42:d1:b5:0d:98:92:c4:
5b:e0:fa:c4:0a:51:f1:15:5b:d5:97:04:1a:56:6f:f4:e6:78:
1a:34:68:69:7f:f4:bb:9c:32:db:c1:fb:0e:3e:91:98:14:63:
ae:81:94:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:05:42 2025 by rpki-client