Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b50b83f-5f7d-3660-a954-0e2556b64c37.roa
File: 3b50b83f-5f7d-3660-a954-0e2556b64c37.roa (raw, json)
Hash identifier: IPl+1D0dcAZdC0a9wJw2d/G5C6ECvSAyrHSSWovpUMU=
Subject key identifier: AB:91:D6:5A:63:C9:8E:C7:A4:AF:F1:99:1C:0B:FF:3C:66:97:3B:22
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584051F74512C0145ED2AA5F1640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b50b83f-5f7d-3660-a954-0e2556b64c37.roa
Signing time: Wed 21 Dec 2022 22:15:08 +0000
ROA not before: Wed 21 Dec 2022 22:15:08 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.54.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:f7:45:12:c0:14:5e:d2:aa:5f:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 21 22:15:08 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=7333bc2a-c0b7-42c7-9313-f245b8f70209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:38:71:e2:97:7b:69:0e:ed:e4:e6:42:2d:
1d:35:02:55:c1:30:c5:a2:ff:78:2f:dd:11:52:b5:
60:f1:01:1d:55:da:22:52:da:6a:55:83:f6:9e:91:
30:9d:ea:66:d7:6c:d8:ac:5e:30:34:13:16:84:fd:
83:5a:e2:fc:43:17:d4:8d:2e:9c:46:a4:f0:ac:3b:
e9:58:6d:c3:7c:d3:b4:2a:f6:c0:78:da:c9:a8:f9:
28:01:f2:4d:93:91:d8:33:f7:59:d4:cb:38:62:3c:
c4:bd:8a:26:dc:c6:b1:7c:1c:50:41:ab:17:04:a7:
8b:38:e9:db:0a:4c:80:64:6c:b3:f2:b3:e9:46:20:
69:90:dd:0b:8e:7d:b9:c4:ce:2d:6b:7f:4c:01:e4:
e7:9f:6d:a4:50:2e:3a:68:d5:2f:4e:84:7e:cd:a2:
14:c1:e7:99:39:a3:26:c1:39:fb:46:fb:35:39:19:
d8:0f:a8:42:f5:92:3d:97:05:76:db:7b:b8:31:7d:
6b:f4:8d:ee:94:b7:df:6e:a7:34:45:3e:31:4f:0a:
46:9c:60:bf:4c:75:0c:56:49:f7:22:13:a5:29:b0:
85:56:31:97:72:e4:41:07:b5:75:de:87:b1:fa:25:
6f:16:ed:fb:85:9f:b5:9f:df:fd:b9:95:54:9a:45:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:D6:5A:63:C9:8E:C7:A4:AF:F1:99:1C:0B:FF:3C:66:97:3B:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b50b83f-5f7d-3660-a954-0e2556b64c37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.54.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:11:88:4f:aa:6e:3c:3c:45:9d:4d:ad:64:dc:b4:89:97:0c:
0d:22:41:59:85:be:b9:8d:ee:d8:b2:29:8b:e4:29:2d:d8:45:
53:fa:94:8d:f3:81:b0:0d:a4:ae:85:fb:af:3c:a6:b9:ea:f5:
82:ed:87:89:53:05:be:a9:63:83:6c:d5:09:d2:02:db:2e:34:
2b:f1:4a:8d:60:d8:cf:b7:41:82:60:3b:9d:c5:b5:83:fa:d1:
e4:c6:ad:9c:cf:b5:3a:f7:af:ca:bf:3d:39:14:c7:9e:69:3b:
e3:d3:47:dc:95:fc:96:67:b9:7c:22:32:72:50:99:b0:f7:44:
70:d2:24:cf:27:71:06:76:ae:e6:5d:6f:bc:96:21:a3:2b:80:
99:a7:2c:10:91:38:ec:dc:d3:50:46:10:5c:8b:28:ec:b4:77:
b1:d9:eb:80:07:1f:84:e7:37:ea:d2:9b:2c:21:28:4a:fb:a3:
d9:70:8b:29:c5:8e:f4:61:51:51:18:28:da:f8:05:c5:1b:0a:
4e:29:24:90:9f:78:ce:c0:bc:a9:61:dd:58:e5:44:6c:2d:8b:
61:b8:b1:02:02:18:5d:12:80:28:f4:e4:f4:dc:6d:40:7f:94:
ae:65:f2:fa:cb:84:7b:82:a7:56:15:94:e1:29:f9:6a:61:12:
9d:05:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:52 2025 by rpki-client