Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44b29c8e-72b3-38d5-9301-a6d8c48c9999.roa
File: 44b29c8e-72b3-38d5-9301-a6d8c48c9999.roa (raw, json)
Hash identifier: 3kwO0TrZuH0GHyxqyM7iuJlQqMn7rxDg/WeYQxFdyaw=
Subject key identifier: 13:F5:62:76:FF:74:D0:BB:AF:1D:79:C8:B9:37:FF:AE:F1:3D:40:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB1AC7362E8C58ABEEB36E510
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44b29c8e-72b3-38d5-9301-a6d8c48c9999.roa
Signing time: Tue 25 Oct 2022 12:00:00 +0000
ROA not before: Tue 25 Oct 2022 12:00:00 +0000
ROA not after: Wed 30 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b1:ac:73:62:e8:c5:8a:be:eb:36:e5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 25 12:00:00 2022 GMT
Not After : Nov 30 05:00:00 2022 GMT
Subject: CN=1fbbdadd-1dd4-41c5-9294-7c521a371228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:b0:f6:14:0f:70:c5:e5:a5:ca:28:d9:2a:
90:47:fa:7e:ca:2b:13:f5:ce:73:19:f9:11:55:d7:
b8:51:05:92:6a:03:e4:06:d4:0d:9b:b9:ab:e3:0a:
7d:a6:e1:9a:ee:0f:c7:24:7c:d4:02:52:44:e7:15:
d3:6b:63:ed:19:d9:8e:ca:57:9a:5e:c3:94:40:fe:
08:24:63:9b:3c:01:65:0b:26:31:66:94:0c:7f:a8:
4e:7d:b7:bb:fc:83:64:0b:96:e5:84:e7:57:29:a0:
bd:e5:e5:41:17:11:03:cd:cb:5e:a1:b7:65:10:76:
ce:fb:3f:22:0c:85:e4:9f:13:65:f9:37:5c:0c:2e:
6d:0e:c2:93:df:e1:6a:ed:44:0b:64:f9:ef:10:58:
17:28:81:79:54:b8:bf:bb:dc:1a:f8:54:f6:7b:3b:
91:23:3a:f3:de:b1:fc:79:72:5c:39:c0:11:d4:4c:
6c:00:a3:e5:f4:60:5d:55:df:8a:45:3b:6c:df:66:
16:e3:b4:1e:c8:79:48:55:43:62:4a:df:92:9c:00:
af:06:92:6f:12:b6:22:20:e6:3e:09:c5:28:bc:ac:
58:41:8a:dd:25:16:3c:13:37:72:41:03:fa:43:1a:
7d:3b:fe:a9:45:02:8a:b9:f5:72:89:59:c8:82:09:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F5:62:76:FF:74:D0:BB:AF:1D:79:C8:B9:37:FF:AE:F1:3D:40:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44b29c8e-72b3-38d5-9301-a6d8c48c9999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.133.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:20:78:66:11:6b:3a:ed:79:80:14:4f:1c:9c:2d:db:c8:e6:
55:83:5f:e4:dc:82:67:6c:b8:a4:86:61:fa:a2:f6:09:aa:ac:
7e:8a:bc:78:04:1d:b7:9e:26:54:67:2a:e5:2b:e5:ee:4e:4b:
6e:72:41:27:0b:2a:42:bf:36:a3:57:0f:62:97:c5:d8:b9:3d:
cb:57:ba:93:be:e8:0d:f5:d4:cf:e9:56:b7:4e:ff:47:83:16:
c7:3d:06:01:7f:2c:3d:e0:b2:85:f3:d4:40:99:04:c6:88:51:
7a:4f:c4:17:90:49:40:ac:84:0d:44:a9:05:db:2a:32:c7:4e:
a4:3c:bb:6f:75:02:a3:19:ce:43:a1:01:e3:ac:01:85:71:fc:
7c:bd:76:16:1f:6c:45:10:b4:4d:29:94:3f:40:15:1e:a4:c5:
25:b3:65:b9:f6:8f:2e:29:a3:6c:db:50:dc:64:4e:43:48:c2:
93:e1:a0:13:94:a3:76:8b:0f:f0:02:f7:ea:68:4c:6d:23:c6:
a7:d9:1a:40:a0:f6:eb:8b:46:53:bf:ec:21:3b:11:d7:ff:ae:
0c:e1:2e:f1:fe:05:78:8f:3d:3e:7a:0f:56:5a:f4:eb:a0:75:
5b:0f:25:06:da:ca:43:a9:59:12:1d:74:58:ec:31:12:30:5d:
28:b8:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:09 2025 by rpki-client