Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4876a70f-bcb1-3b33-b949-ef4c44798f9b.roa
File: 4876a70f-bcb1-3b33-b949-ef4c44798f9b.roa (raw, json)
Hash identifier: I7Tobxw7jkE+I8W53Jt3dNUI77+HsISY7C3ifQLQ/Dk=
Subject key identifier: 63:22:C2:25:E1:9D:90:04:D4:93:9B:9E:AE:F6:26:54:A6:66:9F:36
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406238A3F8BB557AC954E51B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4876a70f-bcb1-3b33-b949-ef4c44798f9b.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.67.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:62:38:a3:f8:bb:55:7a:c9:54:e5:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=ecca11cd-beae-4067-b7af-bcc0cc5004a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:1d:1d:d1:4d:66:6e:93:1c:fe:6b:2d:fa:
98:ce:14:29:7e:89:22:4a:02:5b:44:44:06:c9:9a:
53:ed:af:7a:f5:7d:e5:bd:8f:37:96:e2:10:39:18:
ef:be:a3:95:ac:57:85:97:aa:1b:7c:c8:66:ae:18:
11:99:45:8a:19:5a:c6:84:0c:03:d1:66:a4:4b:d6:
ae:54:e5:f9:26:a9:4b:11:be:df:a2:2b:15:98:5d:
f6:73:6b:e2:b4:79:82:b5:3c:a6:7c:87:6f:0b:cb:
f8:4e:3a:db:bf:87:74:a0:42:21:de:88:bb:f1:e7:
37:e8:ed:14:0a:73:aa:f4:6f:20:9e:13:84:0a:c0:
a8:00:da:25:64:80:11:64:0a:6f:bb:b3:4d:70:34:
60:2b:3e:52:e9:50:57:24:19:4f:71:61:e0:74:d3:
fb:7d:0b:9e:6b:15:29:af:6f:a4:bf:c9:67:68:22:
dd:2b:f7:b7:12:84:12:00:84:a2:3b:32:15:9f:3b:
6b:31:6d:92:82:0f:4d:67:05:5a:47:c5:d6:d7:7e:
2b:db:df:34:08:1c:73:b5:f6:fd:2a:56:c2:98:de:
ae:31:b1:b0:45:a1:ae:79:cd:3c:53:59:aa:bd:eb:
fb:a9:c6:3f:e7:3a:41:45:49:56:6c:72:33:cd:2f:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:C2:25:E1:9D:90:04:D4:93:9B:9E:AE:F6:26:54:A6:66:9F:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4876a70f-bcb1-3b33-b949-ef4c44798f9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.67.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:69:bc:d4:a8:1c:d4:4a:23:67:4c:8d:58:f4:8d:23:b4:55:
4b:b4:0b:c1:74:e1:34:a6:25:51:a8:a6:59:37:38:f9:95:ba:
1f:8f:d1:c2:98:4e:03:b3:78:c1:ad:5c:ea:90:25:2a:bb:45:
a9:26:de:d5:f5:c7:79:5f:76:da:d9:4a:68:33:73:e1:ab:27:
27:6c:1d:9c:d9:4f:b7:8f:f3:33:22:bd:85:11:2e:52:f6:89:
52:0d:16:2f:7c:26:0b:6f:86:c0:84:0a:24:25:dd:50:61:b7:
1d:88:0f:8b:af:c7:0f:ba:1b:5c:6d:f5:b1:08:a7:4e:64:23:
4c:c8:e0:a0:e0:10:73:50:f4:b8:98:53:c1:95:cc:e1:77:1d:
51:aa:58:6d:21:e3:9c:f3:4a:17:be:b8:29:51:ea:9b:15:8c:
a7:b4:b3:b0:f8:f8:07:b6:09:98:a7:3b:74:63:57:16:a8:0e:
bc:65:f9:8b:e3:46:b1:15:2e:62:0c:22:5a:48:ca:bd:ca:fe:
33:06:b5:5b:8d:e1:4a:55:e9:5f:39:b5:90:70:26:f7:95:92:
6d:0f:e5:56:fa:af:c8:ca:ff:b1:31:6a:2b:dd:09:8f:0a:48:
30:0f:19:06:19:fa:18:9f:72:21:5f:b3:a7:2a:c0:a7:2b:88:
8b:42:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:54 2025 by rpki-client