Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aa09975-004d-3457-88d0-b89f4e5b465b.roa
File: 4aa09975-004d-3457-88d0-b89f4e5b465b.roa (raw, json)
Hash identifier: 17XOAXH7lptD/GaATY+SjkcvZaq5F0+tLzZfJ7v9vhs=
Subject key identifier: 7D:C2:BF:3D:09:8D:7D:87:2A:7D:98:2C:F0:45:46:D4:E4:0A:9E:F6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB52242C9E751BEBD1305EC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aa09975-004d-3457-88d0-b89f4e5b465b.roa
Signing time: Wed 26 Oct 2022 12:00:00 +0000
ROA not before: Wed 26 Oct 2022 12:00:00 +0000
ROA not after: Thu 01 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b5:22:42:c9:e7:51:be:bd:13:05:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 26 12:00:00 2022 GMT
Not After : Dec 1 05:00:00 2022 GMT
Subject: CN=066c9b94-0c34-4cd0-b908-dc32e76a3e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:35:35:d6:4d:45:12:8a:44:5f:b8:98:dd:
2c:af:09:dc:76:19:5d:09:56:5f:51:78:ba:ed:6d:
1a:4d:32:6f:cd:68:74:af:b2:53:9f:b7:03:c5:26:
58:38:19:7e:d8:39:b7:55:3b:91:ce:19:4c:2d:9a:
b2:6e:1b:f1:be:f8:bf:da:37:c1:14:c8:40:87:ac:
2b:c6:b6:a8:e1:a4:e3:4e:c9:5f:28:bc:57:c2:e2:
44:d1:45:98:68:ba:44:28:b2:4e:ba:4f:d6:b2:dc:
6a:3e:41:4a:41:44:40:b8:43:0a:49:a1:27:2e:54:
75:bd:cb:a0:aa:3e:ed:39:51:1b:b3:06:73:6e:de:
22:ae:db:22:64:93:c4:e1:33:ef:07:a2:c0:1e:6a:
ab:e0:79:a0:80:ce:21:74:95:38:df:70:2e:63:90:
c1:c8:09:e8:b7:57:6c:21:e1:97:24:9a:40:34:88:
94:26:6c:3e:64:d4:4b:84:b3:c6:38:d8:fa:93:4c:
87:55:27:4d:1f:8a:91:cf:19:bc:ad:84:04:51:34:
69:6a:22:03:e7:4b:7a:8b:bb:9c:0d:dc:b4:74:7e:
93:ab:9a:5a:cc:9c:69:ab:43:05:88:ea:27:c4:7e:
1b:19:d0:26:5f:19:5d:70:ea:68:71:f5:4b:ac:93:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:BF:3D:09:8D:7D:87:2A:7D:98:2C:F0:45:46:D4:E4:0A:9E:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4aa09975-004d-3457-88d0-b89f4e5b465b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:16:ac:a6:9c:d9:07:8f:dc:f6:b1:9d:70:3f:4a:7a:37:85:
b6:a1:5c:92:20:d5:29:7b:b5:df:7e:d9:de:3e:b4:f3:c5:6e:
6f:92:9c:40:8a:1f:76:41:b8:cc:b9:ad:21:20:2e:65:92:75:
bf:22:d4:42:7e:d1:95:5a:49:0a:a3:15:8c:d5:70:60:68:f1:
c4:e2:56:1e:47:a2:61:a7:0b:44:2b:26:88:e1:de:6e:00:c6:
62:cf:9b:4a:35:72:4d:7a:55:67:6a:68:e1:c5:9d:91:59:97:
de:64:6c:bc:98:e9:63:a7:dd:7f:3b:9d:c9:cd:bc:92:42:03:
bb:fd:4f:e9:9e:9d:49:6c:54:dd:3c:b0:52:05:bb:b1:ba:82:
ab:f6:a0:1c:31:f9:b8:fd:2e:fa:18:f4:f9:cd:f7:a1:48:78:
db:96:fc:28:e9:6d:48:27:c0:42:89:b3:c6:a0:a2:d5:a9:56:
d3:20:19:f1:4e:c1:d2:c9:99:ff:76:1b:e8:c8:3f:08:d2:0b:
76:a4:1b:4b:6f:9c:76:49:43:f0:a5:fd:17:f9:9a:34:b6:57:
3b:d8:11:98:a6:74:41:2c:78:de:a2:c9:c2:8d:81:6e:78:2c:
54:d7:b2:53:13:dd:aa:ff:38:4b:00:e8:86:a8:8a:91:ff:ad:
89:3f:ee:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:19:31 2025 by rpki-client