Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4213818a-73fd-3521-a32c-78b2de1f6f6c.roa
File: 4213818a-73fd-3521-a32c-78b2de1f6f6c.roa (raw, json)
Hash identifier: p0cVYwhApMY9+DfVpSXf5tQNmkym3SfVTCgCPgfdJ44=
Subject key identifier: C0:56:BA:52:00:E5:80:99:0B:BA:0E:A2:0E:40:91:A1:65:FB:81:CB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C0BBF044524B3091BA5634C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4213818a-73fd-3521-a32c-78b2de1f6f6c.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.230.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c0:bb:f0:44:52:4b:30:91:ba:56:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=5909f22e-7d6f-45ad-a0e3-c87d198d3ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:1c:c3:84:b7:36:31:de:d9:a8:9c:71:c0:
34:8b:76:a7:cc:ce:2d:b4:f8:97:7e:f2:5f:85:46:
c2:2c:43:c9:55:b8:0e:9c:cc:73:3a:ab:1f:b8:c2:
9b:b4:69:40:af:49:3c:16:b1:63:cc:a3:ea:d4:03:
63:5f:1e:78:43:15:2b:3a:b4:13:bd:68:3f:04:59:
c9:a6:30:b6:d2:f8:0b:2b:7d:16:95:05:3c:9a:a9:
28:1a:34:4f:b1:66:82:01:f4:75:e0:a6:85:86:af:
2f:0c:8b:30:f1:79:4f:64:4f:83:86:4f:de:f2:02:
74:a1:0b:f8:e7:ad:8c:ef:a5:2e:2a:29:76:1d:62:
72:15:ff:16:1d:c3:b6:70:36:44:18:9b:c5:6e:7e:
ef:f8:36:d6:81:04:8f:8a:59:15:6b:d5:4b:c2:04:
93:58:8f:a1:62:b2:e3:37:2b:50:be:ed:64:fb:ea:
b1:bd:ff:68:12:25:54:f9:6f:9a:b4:0c:47:cb:df:
a8:69:8f:59:d9:dd:8e:35:19:90:59:30:d6:4c:0c:
b1:d5:e0:8b:4e:0f:1f:75:ac:03:15:2a:f6:cc:23:
25:5b:75:86:f8:fb:02:4a:e9:6e:f5:26:d7:c5:52:
03:fa:dc:6b:db:ac:ad:1b:e8:a4:53:15:7b:2f:84:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:56:BA:52:00:E5:80:99:0B:BA:0E:A2:0E:40:91:A1:65:FB:81:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4213818a-73fd-3521-a32c-78b2de1f6f6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.230.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:b1:04:b6:7a:df:58:d2:6e:90:76:3f:45:f6:42:4d:c8:53:
91:d6:38:9c:a8:41:97:30:54:8e:bb:fd:6c:f3:49:1b:3f:f4:
f6:55:a5:47:da:01:b2:2a:b9:53:f3:4d:72:1f:59:ae:a2:a5:
da:31:f1:65:e9:b6:ca:20:eb:b6:10:96:e0:40:ac:44:9a:4e:
08:0c:c5:95:d5:88:ed:67:4f:a4:bf:b5:e3:cd:30:19:c7:5b:
1e:5f:88:1e:ff:48:18:0f:84:61:3a:72:54:93:ca:67:e9:03:
64:73:d5:0d:96:89:1c:b2:20:fe:10:06:49:be:d0:fc:e2:87:
c5:79:69:48:34:0c:54:66:86:e5:f9:f1:62:6c:22:3d:99:8c:
32:4f:a0:cd:67:64:ac:f1:f6:7b:7d:67:42:de:9b:a0:e7:18:
61:9b:46:21:a7:25:bd:e0:a8:86:0f:3c:27:5c:d9:ce:71:bf:
84:66:80:4f:95:8a:a1:19:24:84:5a:6f:0e:83:24:eb:3c:4b:
86:84:a4:6c:74:d3:07:6c:59:d3:b1:28:d3:04:13:46:1d:46:
1f:bc:24:e5:9b:8f:59:2f:7b:a1:91:3c:81:06:9a:52:1e:af:
59:af:ec:a4:97:33:87:c8:01:01:a0:de:02:57:57:aa:10:f1:
e7:37:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:56 2025 by rpki-client