Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e0d81bd-c0d6-3964-8b7a-fcafbf803c26.roa
File: 4e0d81bd-c0d6-3964-8b7a-fcafbf803c26.roa (raw, json)
Hash identifier: HWjcynh1vLEe6TJulIlXwgldHazF3GKdFQHNPy3MIdM=
Subject key identifier: 72:71:3A:50:53:B4:9E:3F:30:27:76:22:90:00:74:31:A0:32:ED:95
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584072E2A0EF83A49B934F3074C8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e0d81bd-c0d6-3964-8b7a-fcafbf803c26.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:72:e2:a0:ef:83:a4:9b:93:4f:30:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=f9e31cb9-04a8-475e-b72e-858a201f8b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:a6:fb:52:d5:b1:39:f8:47:d5:f3:bd:3e:
82:19:09:4c:1b:5d:f2:8d:a0:b7:6a:fd:41:2a:b0:
95:72:26:4d:a3:2c:a4:ee:8f:04:f2:fe:dc:ba:2e:
f4:b5:c6:a2:75:c4:fa:c0:37:90:ef:9d:d2:eb:dd:
99:63:6b:ce:22:cb:e5:49:36:e2:cd:67:eb:4d:8d:
24:bb:bd:c5:fe:21:0d:18:a6:57:0a:d2:7f:fd:6d:
4c:19:e4:fb:dd:bf:82:d3:d5:56:89:8b:81:df:3c:
0e:2c:fc:94:90:a3:18:2d:85:00:49:64:71:99:8e:
bd:bc:11:01:7d:53:2e:b6:3f:4a:6d:9a:87:bf:19:
bf:04:a2:fd:44:3d:72:0f:c0:39:d8:1e:ab:93:da:
e0:eb:c1:47:9d:c3:16:6f:be:59:5a:41:0d:f4:44:
b2:71:ba:7c:65:9a:c9:f5:9e:30:16:43:39:f0:7d:
36:4b:b8:b9:b4:59:92:40:0f:41:6c:4d:db:91:c1:
84:c7:5f:ae:bf:0b:ba:0e:59:60:c7:a1:0f:3d:20:
e1:e9:fb:18:8f:cc:ea:fc:5d:a3:9d:b5:1b:49:45:
ee:1f:34:78:d3:3a:87:7e:8a:ba:a8:9c:a1:fb:bb:
67:2b:2f:36:b4:aa:fe:bd:2e:c4:c2:21:79:98:e6:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:3A:50:53:B4:9E:3F:30:27:76:22:90:00:74:31:A0:32:ED:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e0d81bd-c0d6-3964-8b7a-fcafbf803c26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:e7:40:45:47:f8:37:86:5f:15:b9:a1:48:62:42:60:b2:e9:
b9:43:63:aa:f6:dc:04:a3:a1:69:c4:6e:e3:76:4f:44:4b:42:
2b:60:cc:91:91:11:d3:9c:cf:fb:c9:f1:67:dc:cc:dd:3f:10:
2c:47:13:23:dc:5d:8a:ce:de:20:e8:2f:05:88:ae:93:89:7d:
b3:6f:16:f4:53:76:45:c4:cc:d3:0f:80:ee:d3:f8:a6:2b:2c:
2a:43:f4:7c:12:aa:a9:19:80:07:fc:d5:8d:91:88:88:d5:80:
04:e2:0c:45:8f:c6:a3:0d:7a:03:08:41:4b:19:89:36:30:db:
0a:e2:10:a9:95:b3:ca:a0:e9:bd:94:22:db:27:3e:50:9c:ef:
37:38:29:7f:b6:45:7e:f2:21:2a:38:9c:41:63:80:72:bd:9d:
c0:6a:f0:ab:da:3a:85:f5:5c:38:65:91:57:f3:f9:15:fa:a5:
f2:7c:d5:1a:c3:75:29:04:d9:e1:5d:d7:e0:0c:99:76:53:5b:
57:cd:21:20:05:a6:fc:49:26:5a:d9:27:1f:c7:a3:f3:e2:29:
d1:fd:f6:d4:c4:71:48:d0:40:1a:52:20:e7:98:01:0c:c2:85:
65:73:f6:18:37:e4:f4:80:a8:ec:da:18:a9:88:7c:e1:61:d7:
68:ef:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:38 2025 by rpki-client