Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a6e5e6-2d59-3f50-8346-edb452e401cd.roa
File: 48a6e5e6-2d59-3f50-8346-edb452e401cd.roa (raw, json)
Hash identifier: la1vCV/jTPLyiCwLkfhwxh0SCCjNS5PVWMLM4Kz8EZw=
Subject key identifier: 33:43:F4:3C:78:75:A1:F9:C9:10:0D:A4:B6:39:F0:F0:51:C9:9B:FF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDC7358D8355540EAEB1C2300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a6e5e6-2d59-3f50-8346-edb452e401cd.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 56.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:73:58:d8:35:55:40:ea:eb:1c:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=0f2d40c4-186b-492b-a45e-bc1ecfcac247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:e2:19:a3:77:95:8a:19:e8:b7:f2:89:8f:
88:02:15:46:3f:68:a8:7f:ee:2a:e7:79:99:ba:ff:
35:8e:fb:61:3f:c2:7c:4e:0f:83:1c:6a:26:ec:f2:
44:46:2c:d0:8f:0a:b1:39:81:cf:6b:aa:7f:95:c6:
7b:9f:71:21:84:54:28:6e:1d:92:5b:9f:21:2f:10:
64:5c:1a:6d:2e:e6:0b:8c:d7:57:0a:aa:53:65:e4:
b2:41:4d:ac:a3:db:61:4a:18:fb:c9:32:50:39:4b:
a0:ce:be:5e:c4:5f:1a:a9:f0:83:ed:6a:5f:59:5a:
bf:a9:6b:68:20:23:59:10:8d:bc:22:ce:1c:4c:2a:
b9:64:7f:ec:19:24:0d:0f:c4:98:7d:77:0a:e5:1e:
77:0f:91:23:27:1e:78:e8:4c:be:f5:b3:11:d9:23:
b6:d3:9a:95:fa:fd:6e:bd:ed:27:8d:fa:a1:c4:83:
b6:bf:31:34:c0:b2:3e:60:8c:43:6f:11:32:a9:40:
68:49:cc:2c:fb:fc:c2:fe:d9:7f:4f:95:d4:db:79:
0a:27:0c:69:71:3f:a5:d5:24:1d:52:4f:61:cd:d2:
b4:49:23:e0:f6:34:ff:72:96:31:25:76:fb:d9:dd:
53:d3:03:ef:e3:cb:2e:e1:7f:1f:95:e2:df:02:03:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:43:F4:3C:78:75:A1:F9:C9:10:0D:A4:B6:39:F0:F0:51:C9:9B:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/48a6e5e6-2d59-3f50-8346-edb452e401cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:c4:d3:42:d2:16:55:c9:f5:73:57:ce:90:63:28:70:62:2b:
14:3c:e5:a6:ae:23:7b:a2:24:cd:e5:1b:74:b4:b9:2f:ee:28:
3b:0b:9f:77:05:33:4f:f6:50:9a:46:92:19:d8:e8:d6:5d:c8:
41:86:fa:34:04:c2:fe:a9:11:2c:27:32:de:03:c1:b8:28:10:
35:47:2e:5e:b2:d6:4b:ce:e4:4e:ff:f6:9f:14:c2:d3:ca:cb:
36:2c:6a:17:d7:4d:6d:71:3e:5d:24:c6:97:a0:6c:3d:34:f2:
75:c3:e7:64:4c:1d:c7:d1:d1:84:67:18:d2:7e:da:a1:f0:ec:
ca:ed:84:6c:2e:53:73:40:34:d3:8d:10:57:82:35:a2:32:d1:
14:36:f9:e4:47:c8:c3:2d:99:84:75:5e:c4:5f:d0:ac:e6:5a:
76:d9:6e:e1:bc:88:c5:d2:33:29:05:30:21:b6:83:2e:72:21:
8d:8f:79:f5:76:7d:62:dd:6b:c9:ff:69:fe:10:6e:89:d0:bb:
57:b7:89:3f:5c:59:a7:74:22:3e:5f:81:7a:e1:1a:12:da:76:
bc:3a:5b:26:34:9a:2b:cf:cc:1e:cc:ec:58:94:b4:14:17:21:
d0:0b:d0:19:ae:a6:89:20:3d:36:8c:c5:b8:db:29:a2:c4:80:
b5:49:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:04 2025 by rpki-client