Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41a54cad-2712-3a16-b18b-6922b7ba4c1b.roa
File: 41a54cad-2712-3a16-b18b-6922b7ba4c1b.roa (raw, json)
Hash identifier: KQvGAAqvWwZQEqFMML+pqgNCl/ewxJpwK00nJosxLXE=
Subject key identifier: 58:71:19:F2:06:6B:B7:74:1B:91:5B:32:81:79:99:CE:0D:9A:01:1D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C65154220945ED7F8A5A9E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41a54cad-2712-3a16-b18b-6922b7ba4c1b.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:51:54:22:09:45:ed:7f:8a:5a:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=a1924bdf-6f20-40d8-8861-71d76e475c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:75:f3:fc:8d:fc:27:32:a3:b7:ce:68:ef:
9b:4a:92:d4:01:76:e9:b7:69:53:20:f3:6f:76:6e:
96:93:23:cd:1f:bc:bf:ea:df:32:4a:d3:2a:9a:31:
9c:34:6a:63:d0:4f:3c:e3:2a:2c:0d:b1:de:fc:c3:
48:96:e2:98:7a:f9:02:21:46:de:59:25:8a:73:b0:
d0:f3:c1:fc:67:1d:58:f5:f4:ca:ea:78:9c:3f:95:
bc:b6:f2:a4:cf:28:f9:c4:be:78:ea:20:d5:43:b0:
1a:bc:01:cb:aa:d3:40:c7:40:6d:d4:21:94:96:46:
ce:22:c2:5a:2a:21:11:49:8f:53:83:91:30:97:bf:
6c:b3:1e:19:99:bd:89:d8:31:af:af:52:99:28:61:
2a:94:54:56:19:0a:81:33:da:9b:3d:d8:0c:08:d5:
b0:5c:62:e8:73:84:90:17:b8:54:a1:41:66:6a:13:
d2:23:0e:d9:30:24:83:a8:66:1d:59:68:09:23:32:
b5:a4:fa:9a:ac:84:c0:ca:cb:2e:30:b7:3b:a2:46:
7f:70:7b:a5:7c:6a:75:aa:c7:22:d2:43:6c:f6:d5:
bb:e1:39:2c:15:2c:e6:c5:d5:c6:06:99:51:73:ba:
f3:d5:67:e2:bd:e9:31:4d:94:43:c0:16:18:b1:af:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:19:F2:06:6B:B7:74:1B:91:5B:32:81:79:99:CE:0D:9A:01:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41a54cad-2712-3a16-b18b-6922b7ba4c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:c2:11:b5:39:ba:e5:1a:43:8f:f9:6f:5f:69:3c:71:eb:10:
dc:f1:5d:29:3d:43:11:4b:e1:22:80:40:73:cd:63:0f:ce:dc:
27:fe:e7:7f:3e:08:2e:8f:73:93:d0:77:f6:90:79:a2:1d:77:
36:b9:8a:67:fc:a6:b0:fb:a9:bf:e1:d9:7f:e3:2f:24:19:a0:
93:c8:42:08:2a:64:7e:bf:6f:c7:f9:aa:2e:f5:84:2c:75:54:
e3:b8:32:06:e6:0b:ed:ba:4b:53:0f:1d:25:17:37:04:94:2f:
9d:bc:c4:21:d2:5b:b7:8c:03:8b:74:9a:66:82:08:b6:21:0e:
f4:d6:61:b1:fe:79:98:5d:7b:38:f2:e1:50:97:6f:22:38:b0:
58:24:48:6b:fc:40:cb:43:f2:00:79:6b:76:5e:01:50:30:90:
e9:a1:84:0c:c7:ef:40:ce:51:06:9e:f8:d9:81:e3:56:31:bc:
11:03:66:9c:29:53:b0:9f:11:d7:a0:94:5e:1f:f5:8c:28:8e:
5b:57:37:78:69:15:6a:ff:a1:4c:b4:09:48:b4:1e:c3:9a:c3:
45:ea:2c:48:19:27:4a:b3:20:c9:d1:b6:93:8f:21:aa:f3:77:
6e:43:c4:3a:50:6e:7a:40:99:08:e4:ee:59:c2:b7:5f:df:76:
e0:d4:f5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:48 2025 by rpki-client