Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59606cfa-71f3-3b42-9554-2a817f99d387.roa
File: 59606cfa-71f3-3b42-9554-2a817f99d387.roa (raw, json)
Hash identifier: sKbvyBCnUZrfWyeBo1XIskPRdPWMsDVmQeqDvCcw60A=
Subject key identifier: 81:B3:AB:C7:D3:D3:7C:DE:4E:C5:D6:B0:39:63:CC:FD:BF:08:D0:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C08F107D8EA067237F0F80A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59606cfa-71f3-3b42-9554-2a817f99d387.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c0:8f:10:7d:8e:a0:67:23:7f:0f:80:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=000e04d0-c611-4cce-95df-0b8811426223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:9b:8d:57:f2:95:7d:e6:de:29:90:ee:af:
b0:1d:21:2f:66:0d:83:b1:0e:d4:7f:fd:76:cd:83:
9f:fe:b7:2b:d6:47:62:e3:f4:52:82:bc:1f:23:f3:
e5:d8:51:39:63:6e:86:65:4a:41:b3:cd:38:fb:8f:
a6:f4:87:7e:72:0d:0b:93:87:0e:f0:7e:73:6a:c9:
63:b6:b2:1f:ee:45:06:bb:b3:d3:19:44:80:b6:8a:
c9:ac:cd:3c:56:b4:c1:78:39:13:2d:3b:e3:c2:02:
8d:e4:17:bc:98:c2:3b:6d:55:67:eb:8e:bf:9a:a6:
30:af:56:ea:70:f7:96:50:23:45:14:ab:0e:de:6f:
6b:bd:1c:fd:87:bf:b1:34:ac:21:04:36:88:5d:7b:
d0:c1:30:09:4e:c5:48:e4:34:a3:57:6f:ab:66:59:
eb:5e:8c:f1:35:06:2e:ed:58:d0:fe:bd:7e:32:9a:
17:ce:30:28:a5:7c:29:51:f7:c0:13:6a:cd:88:79:
ce:78:f6:28:12:6d:4b:96:b2:09:f3:0c:b6:eb:f1:
fe:97:1c:31:38:78:8d:97:0b:f8:cd:94:94:8e:4f:
87:41:5e:5f:dd:1a:48:45:38:91:1f:d1:02:df:81:
6c:d7:67:77:d4:d6:9b:29:ef:b4:5a:64:28:d1:e4:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:AB:C7:D3:D3:7C:DE:4E:C5:D6:B0:39:63:CC:FD:BF:08:D0:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59606cfa-71f3-3b42-9554-2a817f99d387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:42:9d:78:e4:a7:6e:92:39:76:e5:d8:70:5d:1e:07:81:bc:
e3:cd:9b:e5:fe:7d:a4:b8:22:3c:a3:bd:ac:85:d2:e1:0a:8a:
e8:a7:0e:0e:a3:cc:33:ad:72:67:f1:2d:31:dd:bd:f0:df:e6:
4b:9b:7f:0e:bb:41:90:df:8b:1d:8c:fc:26:c8:f4:00:d0:a3:
41:a9:c3:d5:49:f6:04:3f:50:71:7a:3f:48:4e:b4:64:49:c6:
2f:bf:c9:8b:1f:e6:e0:ff:9b:e3:f1:71:d3:b7:f4:2b:9f:d6:
2c:d3:ed:41:99:25:8b:2f:3a:50:1e:ee:08:dc:c6:5b:73:86:
fe:ab:a4:9f:bf:3c:e3:99:54:51:ce:71:20:a0:4b:81:46:0d:
23:51:fe:62:76:31:a5:cc:61:9e:bc:4c:57:e2:3f:97:65:f4:
90:cb:af:b8:f5:4d:86:c9:fb:96:57:d6:06:5a:d6:5d:bd:73:
a2:9c:ca:2b:98:ee:84:db:2a:c4:64:70:5c:b5:6c:68:f7:95:
58:0d:2d:fa:e8:50:55:37:fe:e2:92:ad:c4:3d:86:9b:1a:b7:
e3:58:f9:10:9c:f6:74:85:45:0d:52:8f:40:07:7c:1c:2a:0e:
85:02:3b:49:50:78:31:60:b6:f5:1b:0f:55:f2:8f:1e:02:03:
37:9b:96:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:20 2025 by rpki-client