Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34c64f18-14ab-36d1-97b3-a67cf06ada2e.roa
File: 34c64f18-14ab-36d1-97b3-a67cf06ada2e.roa (raw, json)
Hash identifier: BIE1GJW/wgmHsuh2FVbHEx8xl/BVMd5TDEyUTd1dSos=
Subject key identifier: 65:0E:A7:19:FB:30:E7:9F:82:53:BC:5C:5C:D8:AD:76:05:D8:4C:4C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFFDEF5337F89FFF6CAD5C3C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34c64f18-14ab-36d1-97b3-a67cf06ada2e.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ff:de:f5:33:7f:89:ff:f6:ca:d5:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=c76c783b-3d2d-4d4f-8a6d-c2d3d491352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ca:7b:82:be:90:c6:b7:a3:64:e2:b1:e6:64:
fb:76:97:3f:42:9a:82:f4:83:15:0d:9a:60:aa:3e:
b4:01:1c:a5:4d:d2:9b:a5:17:bd:2f:df:27:09:a0:
2c:fa:56:86:28:bb:4b:e0:c4:8f:0a:a2:dd:b4:96:
14:c1:27:01:f0:47:8f:e0:8e:d5:1e:9a:f6:4f:d0:
ec:e4:20:1e:65:50:1d:06:f3:76:01:59:1c:76:cb:
b4:01:f0:69:92:3e:8c:90:52:fd:96:32:3e:37:b7:
8e:4c:c9:82:a0:e5:93:25:b6:0b:3c:ab:ba:8e:91:
7c:39:89:3c:58:b5:02:8f:db:1c:be:5f:81:4d:08:
bc:c7:a7:ca:fd:ab:c1:a5:5e:1e:5d:e5:5f:8b:dc:
f1:9a:9d:e6:1d:84:01:8c:60:6a:03:a6:4e:74:68:
87:2c:ae:bc:96:b7:bc:b1:08:9f:17:77:76:41:f7:
5e:83:82:75:5c:21:4b:56:17:17:b7:b8:5d:0b:c1:
4e:85:b7:79:c2:b4:69:0d:b4:86:b7:1b:49:b3:0d:
26:ff:50:c9:03:6b:3c:61:78:b4:95:fb:6f:9d:41:
8d:77:f4:06:7b:81:8c:40:c0:dd:ed:ba:ab:87:44:
a4:88:9d:91:70:f0:eb:98:d2:8d:a9:58:23:13:05:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0E:A7:19:FB:30:E7:9F:82:53:BC:5C:5C:D8:AD:76:05:D8:4C:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34c64f18-14ab-36d1-97b3-a67cf06ada2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:db:66:2b:32:64:59:8c:63:6c:b0:a7:cf:20:a4:2d:51:72:
02:5f:db:37:be:3c:f5:66:eb:3f:43:9d:10:f2:35:f6:6b:ae:
09:9a:30:be:e7:a5:14:c3:38:a5:03:b0:d5:8d:04:f3:ec:77:
60:e4:8f:bf:75:a6:27:bb:68:a6:8d:0d:be:e3:5f:96:c3:f0:
4c:5f:5f:16:85:4c:9d:94:75:76:ac:6a:fb:f2:4a:b5:92:86:
96:a0:63:32:15:4f:a8:3b:c2:9a:f7:8f:6c:71:88:3f:b6:1f:
59:31:0c:41:57:7f:48:32:6a:87:54:e6:e5:2b:86:e8:d7:d2:
fb:ed:29:90:ad:af:a8:fc:cf:41:10:5f:8c:c2:bf:93:18:c0:
90:b7:e1:0f:96:7a:53:0a:29:b0:a3:0a:44:fd:27:59:6e:17:
bd:73:7d:9a:13:3d:d8:48:c2:d9:36:94:40:52:68:4a:ed:89:
46:c6:7c:d6:a3:67:09:cb:90:22:dd:4a:08:1a:8c:3a:70:6a:
a7:ca:d9:7b:ed:55:45:b1:6b:1c:3c:f0:6a:fe:a8:6d:df:04:
bd:72:02:3a:93:ae:35:5e:e5:a5:be:dc:3c:49:b6:64:5b:63:
89:33:ce:16:d9:16:5e:17:8e:58:04:04:df:47:14:fd:f5:61:
70:43:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:34 2025 by rpki-client