Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38e94872-0d71-387a-b688-26e76150854d.roa
File: 38e94872-0d71-387a-b688-26e76150854d.roa (raw, json)
Hash identifier: qnumG23D0bBv7QlrUTn2hedOJl46LyRh6MPpwD1+oQ0=
Subject key identifier: A6:D3:39:22:AF:C3:58:F1:E4:AA:6C:20:D7:33:35:15:8D:CB:E6:F9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840277A7CCED60F22E72DD6E360
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38e94872-0d71-387a-b688-26e76150854d.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.104.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:7a:7c:ce:d6:0f:22:e7:2d:d6:e3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=68b951a3-435e-4706-a974-84f1757bf668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:4a:0e:b8:bc:74:84:82:41:1b:b9:08:25:
fa:9c:0a:18:61:61:4f:4a:f7:da:89:48:90:da:1c:
27:c5:25:7d:5d:34:80:6a:94:61:f8:2b:ba:e1:08:
aa:82:cd:fd:7f:0c:95:60:88:43:11:a5:00:c2:3c:
27:a0:3d:e2:67:00:47:22:12:18:3c:9e:dd:1a:33:
2e:29:05:8d:87:ed:aa:93:1b:00:10:59:bc:05:f3:
e1:f0:90:00:38:7e:e4:bf:2e:60:07:a9:80:4c:6f:
9b:e1:b3:96:9c:b8:c9:ae:3d:93:f0:8f:e4:4f:93:
74:31:3b:b8:af:9e:ef:c0:b5:3a:2f:2f:14:65:30:
59:d5:22:36:83:90:d8:c4:55:c2:0c:60:16:81:45:
85:20:af:b5:5d:d9:d2:bb:f9:24:2e:1e:ca:82:84:
9d:c7:e8:d2:1f:d1:e0:43:e9:40:66:92:81:52:7d:
f1:34:6f:b3:c5:c6:87:63:0d:c4:1b:57:08:7d:47:
6f:7c:13:75:af:83:db:79:3f:7d:cf:fd:9b:e4:29:
2e:f8:28:4f:ed:93:fd:a2:b4:be:7d:0a:71:04:27:
53:6c:06:8f:97:c6:07:10:39:b3:46:82:dc:43:31:
49:94:d5:8b:29:bd:72:7f:51:57:5c:e1:16:46:c2:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:39:22:AF:C3:58:F1:E4:AA:6C:20:D7:33:35:15:8D:CB:E6:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38e94872-0d71-387a-b688-26e76150854d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:73:cb:59:44:11:84:79:09:63:1b:ee:38:d2:9e:ba:83:06:
85:ec:0d:43:66:ed:30:b2:96:1e:ea:58:57:70:4a:97:e8:d7:
f2:34:cf:8c:92:90:bb:bf:93:96:58:15:01:b3:65:94:f5:83:
5a:ba:d6:1d:86:01:48:23:9f:f8:5f:75:2d:17:6b:f3:6a:4f:
87:dd:60:f7:2a:48:2f:df:36:8d:6a:a5:2d:39:fb:21:65:19:
7f:b3:c6:09:13:5b:67:f5:b3:64:e4:cc:71:90:48:9b:19:7f:
71:f3:6a:80:0a:cc:c9:54:ab:a6:13:53:8c:a5:32:60:ad:bf:
a7:ff:e3:35:63:dd:76:17:ed:de:d5:b5:52:12:c9:26:c9:ff:
5b:d4:e4:6f:2c:7e:b5:d4:96:48:cf:4b:14:9f:ed:61:79:57:
cc:71:bc:cb:b2:3f:28:8a:e0:76:52:7b:7f:a5:80:c6:11:1c:
aa:65:c3:4b:ef:b6:0c:ae:ca:c6:cc:17:0f:78:b2:b5:0f:b3:
a0:35:0d:9d:fe:1b:fd:10:fb:23:66:87:30:36:d8:dc:45:f6:
0c:07:3a:88:1d:ab:e7:c5:93:5e:5b:e4:cc:36:86:8e:17:1e:
80:cb:51:d7:6a:e4:cd:10:93:46:70:63:e5:4e:51:e1:a8:02:
48:d7:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:42 2025 by rpki-client