Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a670d62-7df8-3bca-899d-73a8f0706e23.roa
File: 3a670d62-7df8-3bca-899d-73a8f0706e23.roa (raw, json)
Hash identifier: hZxeDQRTyW3nqdiTopi8VBYGimRoatp4ttfNZZa+Hco=
Subject key identifier: 86:FD:F0:CD:76:7A:B6:EA:A6:7A:F9:46:76:2D:90:2A:56:9B:7E:02
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403B485EF49213EE2276412D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a670d62-7df8-3bca-899d-73a8f0706e23.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3b:48:5e:f4:92:13:ee:22:76:41:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=1cbc9df7-0342-467d-bd26-ddac4368c34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:36:50:84:24:4e:da:3d:e9:58:c6:03:8f:
cd:6b:da:51:b3:38:6f:38:05:c5:d8:33:40:dc:35:
75:ea:f9:f1:b2:5a:18:fe:3b:16:ce:63:63:91:1b:
e1:db:51:ae:99:59:d7:33:3b:17:61:9e:9b:2c:96:
54:8b:a6:01:93:a3:2c:77:44:66:05:22:5d:a4:99:
95:f9:e4:cc:4c:12:e2:d4:0e:23:06:51:4b:20:e6:
ea:00:48:79:b3:a9:22:21:90:5e:75:ef:a9:10:36:
d9:65:7c:90:f1:50:2d:db:35:31:f2:c4:a4:dc:f6:
ba:55:23:e6:82:ec:6e:dd:26:d5:a5:39:1f:26:18:
40:0e:e6:84:5f:32:34:36:66:6f:ae:17:8a:51:ea:
90:e0:6e:75:57:24:b3:d0:5b:bd:33:14:2a:e3:53:
d6:30:45:f5:9a:15:cb:e3:71:38:5c:06:7f:e8:42:
46:94:76:ea:89:74:e1:4b:7d:29:11:5c:f5:c4:c2:
b0:08:ce:47:a5:c1:a4:e4:82:1d:ea:64:4d:aa:8a:
04:15:cb:6d:be:52:77:7a:d1:35:88:5a:ed:05:e1:
57:0e:e5:70:fa:35:ff:cc:23:ed:65:72:a5:a5:96:
c6:14:ee:98:39:4d:3f:fe:0e:7e:60:fe:00:79:5f:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:F0:CD:76:7A:B6:EA:A6:7A:F9:46:76:2D:90:2A:56:9B:7E:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a670d62-7df8-3bca-899d-73a8f0706e23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:cc:81:8c:c6:de:cb:6b:90:95:c3:1b:be:58:a5:34:70:a5:
b5:04:d4:2a:c5:f0:d4:56:c0:c5:97:ed:a1:9a:d4:89:60:b0:
e7:3b:c9:ea:14:d1:b3:96:68:cd:84:00:3c:b9:c0:dd:42:14:
18:e6:17:a3:3d:38:52:59:2f:28:83:e1:5b:b2:35:9f:fb:6c:
e6:66:8d:9a:12:c9:b4:0f:84:00:fc:ce:8b:ca:3c:bf:80:bd:
94:06:67:f9:00:f8:14:3f:28:30:79:7a:a8:6d:8b:5e:75:56:
0d:f2:e5:ae:43:3a:e1:29:a3:59:99:8b:e3:7a:f4:23:c7:1d:
37:7b:99:5a:0a:3d:da:ce:69:b9:d4:c1:c3:11:9f:9a:80:7f:
23:28:01:cc:87:2b:6f:aa:89:da:94:15:c1:b6:46:37:7a:b7:
0f:39:27:98:19:2f:98:6d:4c:2d:78:dd:42:19:8c:6f:83:93:
ce:c5:ee:16:6b:ff:54:6e:46:9e:3b:ee:a1:66:16:a1:5b:8f:
0c:d6:a6:b3:3b:25:29:11:b0:c1:2d:b9:f1:29:32:c3:6e:40:
d0:a3:22:c3:0c:4d:02:1e:fa:28:bc:4d:c6:84:33:55:5a:66:
58:5c:fd:43:56:56:0f:11:8b:77:80:ce:6c:cc:9b:25:db:5d:
97:e5:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:36:52 2025 by rpki-client