Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d1af5fd-76c2-3bdf-9ea0-69c5f867e285.roa
File: 3d1af5fd-76c2-3bdf-9ea0-69c5f867e285.roa (raw, json)
Hash identifier: 1O7xLYdyNH5LKWw3yRYhXV095eO3wNqPutrUjWcwOKM=
Subject key identifier: 5F:5C:CA:C5:82:2C:CA:A8:C8:20:66:4C:EB:61:5E:E8:75:A2:E4:5C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB4D06E17BA6BC4BB467D52C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d1af5fd-76c2-3bdf-9ea0-69c5f867e285.roa
Signing time: Wed 26 Oct 2022 12:00:00 +0000
ROA not before: Wed 26 Oct 2022 12:00:00 +0000
ROA not after: Thu 01 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.136.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b4:d0:6e:17:ba:6b:c4:bb:46:7d:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 26 12:00:00 2022 GMT
Not After : Dec 1 05:00:00 2022 GMT
Subject: CN=8306508d-e721-4360-abd5-d2b4c00dde6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:35:cc:96:fb:f1:26:3b:0e:58:be:63:10:
d0:58:7f:9d:8b:d1:bb:bd:fd:3e:c3:b1:a7:8c:4c:
dd:92:95:4e:7f:9f:b9:22:9c:8b:bc:70:62:c8:43:
99:9d:a3:4f:a3:60:f8:7e:9c:e6:cb:d6:1a:58:8b:
6d:f5:c7:91:90:f0:96:56:47:fd:c1:f3:c8:18:45:
21:1c:ce:50:71:79:1f:ff:3a:64:64:cd:22:24:c3:
c2:5c:ae:48:e4:81:04:ab:95:15:c6:6c:37:00:b8:
f0:ed:85:45:86:09:af:cd:1b:87:90:4c:53:7e:1c:
73:a4:d1:48:6d:87:ba:1d:82:69:ba:d6:b7:9e:6d:
c8:55:e4:aa:5e:49:93:94:03:34:38:fa:94:5e:58:
f7:6d:01:fc:46:e0:b6:8c:7f:d9:a6:29:5e:79:a5:
9f:d1:f5:8a:3d:d2:9b:01:6d:b8:6a:63:9a:74:6a:
d3:0d:9e:cb:ef:38:41:f9:44:fd:a3:48:a3:bd:32:
11:6f:4d:bf:2e:52:fb:6f:d3:0d:1a:ed:2f:d7:a8:
ff:54:e5:48:29:de:00:b1:cf:95:a7:fc:83:cd:56:
31:a3:df:c8:d5:54:fb:77:42:3a:06:c9:60:e5:22:
bd:71:49:d9:80:58:cf:f6:54:ea:56:65:05:f8:42:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:CA:C5:82:2C:CA:A8:C8:20:66:4C:EB:61:5E:E8:75:A2:E4:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d1af5fd-76c2-3bdf-9ea0-69c5f867e285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.136.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:9c:9c:fb:a7:72:65:f4:8a:0d:bb:4a:c1:41:f1:d4:eb:83:
5e:97:b0:ba:a6:f8:70:50:c5:80:26:60:2c:b8:55:82:cf:64:
04:fd:f3:4e:8e:70:23:af:8e:5d:e5:23:b3:65:56:7f:bb:67:
fe:e6:03:75:12:14:a8:cd:50:9f:80:a9:22:64:6b:82:03:3b:
9f:52:7c:dc:21:f6:4f:d1:40:f3:4c:68:48:41:2c:7c:66:ef:
60:e9:31:03:21:ac:79:5f:41:58:c9:c7:c1:6e:11:2b:6a:80:
40:90:ea:9a:37:4e:e9:0a:ef:b0:48:c8:4f:cb:bd:a0:a9:75:
89:dc:82:96:c3:d0:cf:c7:87:83:74:c7:e0:57:4b:b9:41:58:
09:56:24:f3:16:74:f4:ca:2b:35:57:af:13:2f:1b:67:02:d8:
f1:d0:09:66:6d:0a:98:72:fc:00:bc:40:c8:aa:7a:a2:34:b1:
0f:f6:a1:c4:71:65:7d:37:60:3e:f5:95:7c:00:a9:a3:42:38:
c3:24:5c:69:c2:9c:f2:1b:5d:4c:60:be:2e:b0:04:a6:d1:38:
27:ff:14:c7:92:f2:42:fb:47:c4:7a:11:09:8f:ad:e2:c9:36:
76:fe:19:bd:03:7a:25:1c:26:f4:09:59:cc:a6:0a:72:14:e4:
5c:b0:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:13 2025 by rpki-client