Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43e3954b-2bfc-33d0-9089-04a8a4fb9a62.roa
File: 43e3954b-2bfc-33d0-9089-04a8a4fb9a62.roa (raw, json)
Hash identifier: K6cy10Hu++3v2RSZP6y1C21V7tVVGYr9KOeSxohZRBk=
Subject key identifier: 73:3C:53:64:D4:1A:01:33:99:67:2E:E1:5E:D3:EC:5C:C7:B9:03:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409C8EE1A5F335051276480840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43e3954b-2bfc-33d0-9089-04a8a4fb9a62.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.109.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:8e:e1:a5:f3:35:05:12:76:48:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=cb0247ea-422e-4062-89ed-db013d369b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:29:57:32:28:8b:1e:45:a8:18:5c:a5:84:
11:38:43:ed:c5:77:3a:ea:d7:fc:5f:4e:a2:bc:f3:
d1:a3:be:c7:91:5e:56:e9:01:44:8d:67:fe:7d:82:
7f:f8:78:9d:12:93:a2:c1:19:40:ec:60:43:04:db:
b3:06:9d:20:ea:b1:5d:9b:47:58:88:9b:2b:92:98:
c0:8d:ae:f1:1c:58:ce:33:78:56:24:b7:fb:05:c8:
ca:d2:ed:6c:53:b5:e1:6a:a2:ff:16:35:70:26:48:
d8:9a:5f:c4:81:a7:5f:84:41:fa:7a:56:b4:c4:7e:
a4:d9:8d:18:65:8e:17:82:b2:c3:e4:d2:01:a7:9d:
76:21:7a:09:33:d3:68:b6:55:a0:8e:0a:85:ae:7d:
68:f3:90:e3:3b:b0:a1:69:71:37:d4:a1:48:57:c9:
1c:74:fd:63:5f:71:27:70:3d:f0:23:1f:00:ba:84:
67:54:d4:1e:f3:45:2d:23:d8:fe:a8:07:7d:a6:e9:
0f:bc:04:f9:61:d5:ea:f5:45:dc:1e:cf:60:ad:04:
f0:de:a6:5a:6d:26:15:42:e4:78:f9:99:67:f2:f7:
49:ec:f6:f4:34:47:68:48:45:d6:57:4d:65:88:ac:
0e:98:a4:6e:93:5a:75:67:a2:68:d7:d5:6b:99:9b:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3C:53:64:D4:1A:01:33:99:67:2E:E1:5E:D3:EC:5C:C7:B9:03:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43e3954b-2bfc-33d0-9089-04a8a4fb9a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c2:61:fa:84:b9:6e:24:05:3d:bb:7b:0d:4f:bb:1c:c9:05:
ab:64:45:27:6f:92:5f:7e:f6:f8:0b:24:a6:e6:91:09:ab:f7:
f9:8b:da:65:65:93:dd:f4:f6:1d:a0:57:df:ae:24:7c:96:30:
03:23:d3:a3:01:a0:75:8a:b4:7a:da:d2:62:84:4a:9a:9e:5c:
84:b0:5d:8c:8b:7f:70:7c:56:1e:fa:ca:4a:c1:eb:ba:d1:20:
f3:9b:d5:73:d8:23:84:9d:58:a2:6e:a6:aa:07:8d:21:b5:2b:
c8:f3:59:83:26:c3:3f:e4:a5:6e:77:2a:88:b0:a2:c1:c2:bc:
ef:ff:e5:2e:e4:61:72:e9:02:58:fb:89:c9:af:aa:db:c2:07:
47:4f:2d:61:60:ae:7c:a7:25:82:30:ae:d5:f1:71:19:92:b1:
bf:da:6e:c1:c0:61:eb:0c:b6:22:cb:3e:94:0f:4b:a9:87:26:
a3:92:44:c4:5e:3b:49:a6:80:81:5f:37:cd:fd:a6:de:08:62:
97:ca:50:02:56:58:ea:98:d4:7b:2b:6c:52:92:d6:57:7d:4f:
56:1a:b8:75:d1:03:99:fc:35:a0:d0:9b:21:5e:66:ad:42:c7:
b2:08:46:c3:aa:cf:81:63:f6:62:13:f5:c1:6a:30:c3:3b:38:
d3:58:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:45 2025 by rpki-client