Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/408f3d89-2b30-3912-a307-a8e84ef874a8.roa
File: 408f3d89-2b30-3912-a307-a8e84ef874a8.roa (raw, json)
Hash identifier: 5hSBqWNBo5QxFU006wyJHzc8lpEplpeKbY3aPF6/w7k=
Subject key identifier: AE:AD:8E:D5:D8:DA:B1:5B:19:F9:D3:53:7D:6C:CC:B3:F0:1D:83:1B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C62474A018507CD6E4183840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/408f3d89-2b30-3912-a307-a8e84ef874a8.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.125.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:24:74:a0:18:50:7c:d6:e4:18:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=03d03c7a-e8aa-442e-8110-83a43588efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:b1:a7:b2:55:76:69:8b:bd:00:0b:79:c1:
c0:4b:37:33:ac:cd:3e:89:ff:3d:fc:6f:f7:9b:03:
16:4c:65:3d:fe:6a:42:63:3d:26:31:61:d2:15:0b:
56:4f:a3:75:18:18:3e:18:37:60:d2:46:17:59:f5:
32:a0:64:12:e9:07:9c:09:0b:85:3a:45:5a:7b:8d:
de:f4:05:a6:ad:69:13:f2:19:ba:6d:cf:9a:ef:bd:
3a:29:3d:2f:2a:66:db:c0:4b:d0:72:d5:4b:6c:e3:
63:48:7d:64:b2:1b:63:45:72:3a:bf:94:c6:35:af:
02:72:9b:45:ca:1c:38:59:95:63:b7:b6:df:01:da:
8e:03:30:e2:49:1c:ea:ba:3b:ff:54:a4:01:1f:93:
a2:e4:59:2e:07:2f:ad:a3:af:dc:bc:4c:d5:be:73:
79:fd:fc:07:26:ad:0b:9f:9f:9e:56:88:77:6c:55:
bc:98:9a:17:bd:9a:69:81:7d:ba:41:af:8f:c1:f2:
55:e4:42:54:b2:a2:21:45:41:da:2c:c3:76:f8:e7:
27:75:40:a4:d1:8c:2a:79:d1:7b:b1:5b:97:f7:eb:
42:bd:dc:39:fd:82:2d:8f:65:87:5a:c8:70:9f:2e:
e7:f7:1b:d8:56:13:8b:bf:ac:da:77:05:17:7f:e1:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:8E:D5:D8:DA:B1:5B:19:F9:D3:53:7D:6C:CC:B3:F0:1D:83:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/408f3d89-2b30-3912-a307-a8e84ef874a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:15:60:c3:2f:36:91:18:83:52:70:9e:e1:f6:f9:a1:e3:e8:
92:3a:c1:6f:da:23:76:2c:03:f3:bd:c4:27:5b:d2:42:d6:b1:
e7:1f:85:37:8f:c7:65:23:5a:aa:43:a5:84:e7:79:cd:ef:80:
9f:4f:ae:ba:16:97:0a:4e:b2:e8:49:9f:26:fd:b0:bc:d5:48:
34:e0:7c:2b:d3:8c:54:e6:26:aa:8f:73:ab:a3:08:b4:eb:6d:
87:26:3d:e3:05:da:8f:80:8f:87:80:a9:0f:43:78:06:aa:a7:
71:50:a0:7b:1f:f4:d9:89:54:d5:0a:bb:f3:e5:de:3c:a8:67:
28:51:a3:b1:66:a1:a7:b5:66:8b:c1:8d:39:74:c0:f5:68:6b:
cd:88:3a:8b:da:87:11:81:ae:06:5d:67:15:12:24:72:3e:c2:
88:51:df:b7:d7:5f:e0:99:cf:0d:ea:a0:af:b0:1d:11:fa:60:
c2:3e:3a:0e:4a:31:68:e1:1b:02:80:4b:32:ca:57:46:8f:2c:
44:9e:f0:f4:1c:80:fd:9e:53:bd:08:ba:a8:e6:7f:29:a4:7f:
43:35:70:d0:f6:ea:f4:1c:64:62:b8:81:77:15:02:da:cf:0e:
bd:04:fa:62:76:c4:81:1e:29:2c:ba:44:e3:12:75:3a:c9:66:
65:6c:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:28 2025 by rpki-client