Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47d4b1b2-4818-3d40-8f1d-d0d41eee8c27.roa
File: 47d4b1b2-4818-3d40-8f1d-d0d41eee8c27.roa (raw, json)
Hash identifier: /jzL7ymTNpjv3pK43SUMjmJ4258Saff0bdvVZ/olaHU=
Subject key identifier: 09:8D:79:3C:B3:C8:68:6D:3B:D3:7D:20:2D:12:0C:53:FA:C8:17:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402A80E9E1ABC9E4770D9EE785
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47d4b1b2-4818-3d40-8f1d-d0d41eee8c27.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:80:e9:e1:ab:c9:e4:77:0d:9e:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=1cda6792-26a6-4372-b5e6-8a5b88dfc7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:e8:c6:15:a5:40:bc:a6:12:5d:db:29:c1:
e7:b9:cc:3b:6a:57:78:ef:fb:6c:2c:f3:42:d8:01:
19:11:19:2a:cb:91:40:10:d7:1b:47:88:8d:fb:48:
a2:23:ae:5f:61:5d:50:f9:dc:be:9f:fc:8a:7a:27:
c2:23:ab:e0:19:79:de:2b:33:e5:9a:09:08:98:0f:
ef:f3:0d:29:b0:a1:9d:95:a0:f5:cf:ce:e6:72:e2:
0a:ff:9c:43:c9:4f:53:80:47:32:c7:a3:be:7f:c1:
1e:d6:3c:d2:91:d3:19:57:f5:60:32:f0:58:9a:ea:
fe:5d:4f:74:7a:9d:2b:02:bd:fb:3d:e1:78:b6:dc:
6f:c8:2a:b7:18:69:12:73:0b:8f:56:5f:31:bb:aa:
07:e4:5d:50:cc:09:96:f4:05:f1:59:fa:bb:c1:a1:
a7:d0:d0:c0:a1:3a:75:5c:82:7e:6d:12:79:3f:72:
66:6e:00:14:40:b0:2e:ca:5c:e0:c2:b4:15:94:ea:
c9:86:7d:03:a7:fa:8e:48:bf:8e:09:aa:9f:30:90:
85:e5:af:87:94:af:b9:6c:f8:b6:32:6e:92:08:90:
75:6a:0f:a3:b5:e9:c5:8e:63:9c:ce:c3:fd:e5:81:
23:34:48:62:e0:77:f8:d8:5a:71:f1:01:c9:d2:82:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:79:3C:B3:C8:68:6D:3B:D3:7D:20:2D:12:0C:53:FA:C8:17:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/47d4b1b2-4818-3d40-8f1d-d0d41eee8c27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9a:0f:1d:e0:82:c9:f2:49:a6:32:10:e3:2f:48:c7:5f:ec:
99:62:cf:7e:51:51:7f:14:b7:14:77:07:05:6c:2b:fd:b1:82:
f9:e6:3a:3b:18:25:b9:2b:13:b6:a5:f1:9a:50:e3:7f:4e:bd:
5a:74:25:34:16:19:de:26:84:81:8a:22:3d:c3:ad:c9:b6:a4:
1c:54:8a:87:2b:e6:9a:d3:37:15:66:91:08:9e:1c:b8:c4:1a:
4d:c6:22:e5:f9:de:88:06:02:b6:d5:7e:31:ad:3a:4e:b7:79:
f9:a5:b5:f3:d3:0b:16:e9:fc:b1:0c:ad:30:66:0f:5f:6c:15:
22:75:50:be:78:2a:6a:74:f9:64:15:d7:9d:79:e8:68:b9:fe:
28:61:05:3f:89:4d:99:29:7d:8b:1c:35:9b:9f:33:68:6a:4a:
ba:32:55:5b:09:17:d0:20:eb:3d:25:2a:b9:a5:30:c7:30:07:
d8:97:81:c9:db:04:d5:fc:5d:cd:b8:95:2f:1a:f0:33:cc:b1:
6a:b1:c3:c0:79:15:9e:58:9e:28:21:ce:26:de:77:e0:d3:73:
92:df:09:ac:d7:24:de:e6:bf:ef:2e:6d:ea:10:59:72:2c:0c:
93:f9:04:8a:93:bc:2c:2d:d4:c4:36:b0:76:a9:46:ba:6c:ec:
1e:28:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:25 2025 by rpki-client