Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3994ec19-796f-3a53-a730-4a258954ac0d.roa
File: 3994ec19-796f-3a53-a730-4a258954ac0d.roa (raw, json)
Hash identifier: 6uAZXcUvNOE94svP/AARA52UFuUjyDZKqGM2tV9JirI=
Subject key identifier: B3:B1:82:79:9B:F2:B9:86:1F:FB:62:CD:ED:1C:FC:F3:F4:0A:8F:53
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDBFC6F6EF582943252DA7280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3994ec19-796f-3a53-a730-4a258954ac0d.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 56.66.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:db:fc:6f:6e:f5:82:94:32:52:da:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=ae9d7bae-198b-46d3-82df-3aa7bb3d2ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:79:20:12:cc:e7:09:2a:92:30:32:07:a0:
ac:e3:53:b0:74:fe:cd:4d:75:98:6f:d3:cf:44:30:
3e:d4:19:ae:88:65:69:55:ec:00:bc:f6:03:7f:55:
4d:76:24:58:1b:1a:64:2f:97:5a:ac:fb:65:4b:8f:
be:45:da:4d:53:c8:a7:76:a5:2b:e6:cf:ce:7c:aa:
a4:3a:99:eb:80:44:bd:aa:5e:0b:7f:f3:c6:7f:4f:
e4:89:6a:6d:b4:1a:3f:37:61:4b:c4:61:17:ed:58:
9e:57:52:07:66:de:e0:e5:e1:55:9c:18:b9:87:47:
93:a3:83:31:78:ec:f2:ff:03:22:df:d0:35:1b:5c:
0c:83:72:18:28:7d:b7:a5:44:78:f6:c4:1a:ef:e8:
1d:db:6f:d1:04:b8:e8:3d:e2:0b:a7:85:2e:ff:36:
9a:6f:c2:17:11:5d:31:61:71:bc:86:57:92:3b:30:
60:d4:ff:f5:27:52:31:ec:84:79:b0:11:ba:10:95:
65:37:a4:36:6a:04:28:84:30:f3:ea:81:80:f5:ac:
53:3c:57:74:62:b8:05:26:b6:fd:b8:ee:ae:54:71:
f1:a1:ae:21:2e:05:ba:59:66:dd:25:9a:a5:9d:ac:
86:e4:b3:16:d5:73:33:33:da:25:e9:8d:ef:fa:c0:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B1:82:79:9B:F2:B9:86:1F:FB:62:CD:ED:1C:FC:F3:F4:0A:8F:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3994ec19-796f-3a53-a730-4a258954ac0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:4a:ce:d2:c8:64:bd:ae:bf:5a:07:ae:79:72:bc:a2:b4:7a:
b7:13:aa:5a:9b:cd:3c:a5:23:49:08:e4:86:33:4e:41:7a:cf:
57:ff:f5:bf:f7:a6:6a:5e:6c:85:b1:30:0c:30:d9:92:26:89:
f8:08:69:84:d6:9f:12:a1:b4:d4:32:23:4d:af:74:05:cb:88:
03:40:52:0b:95:c3:46:a1:49:5f:9c:49:21:20:ad:c9:28:83:
f0:00:f0:3e:75:7e:07:bc:aa:7d:e0:6b:21:08:92:98:07:22:
1f:7d:9c:6e:84:de:9f:85:54:9b:51:72:82:83:ba:91:8a:6f:
94:28:7f:f1:30:45:59:92:fd:b8:ec:44:0b:ff:bd:f5:44:32:
47:ce:b5:22:62:1c:20:86:e4:0e:66:98:ed:20:c9:ff:65:ee:
a1:0a:db:8e:86:82:eb:49:ef:88:09:8b:a3:b6:1a:7a:f3:a6:
9e:0d:c8:4b:c7:0e:74:aa:27:98:9c:ba:0d:58:48:dd:15:60:
a7:2c:83:a4:a1:3d:23:e6:39:41:fa:6a:b1:12:89:e5:1c:74:
f4:35:0f:60:ee:8c:68:5f:f8:40:2c:3f:6b:4c:cc:d0:f1:09:
04:52:56:57:86:b3:f1:28:d8:ba:4c:ed:34:57:48:cb:31:31:
be:d5:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:41 2025 by rpki-client