Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a7bb346-8820-3412-b261-1dfc04915e86.roa
File: 5a7bb346-8820-3412-b261-1dfc04915e86.roa (raw, json)
Hash identifier: CVNhgvzAAxGFnMHR+kq8eph0XBCiMKAAlDsb5N0aq5I=
Subject key identifier: A3:2A:C4:1C:59:8F:A8:0A:C5:13:8B:00:98:8B:B7:01:6E:7F:D5:AA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F507C5AD07F298A2F7B3EC500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a7bb346-8820-3412-b261-1dfc04915e86.roa
Signing time: Tue 20 Sep 2022 12:00:00 +0000
ROA not before: Tue 20 Sep 2022 12:00:00 +0000
ROA not after: Wed 26 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 56.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:50:7c:5a:d0:7f:29:8a:2f:7b:3e:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 20 12:00:00 2022 GMT
Not After : Oct 26 04:00:00 2022 GMT
Subject: CN=a7f2a090-91fa-47df-8cbb-96e0db1397ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:d6:0e:f2:95:9e:96:84:08:77:8f:42:51:
1b:0f:dd:e6:71:26:49:d0:71:d9:6f:d8:d0:f9:fb:
78:38:09:d8:85:8d:8f:cb:d1:c7:db:f9:ed:e7:85:
97:05:07:36:3a:92:3f:fa:ec:41:2a:a7:51:42:e1:
26:e5:b1:06:47:03:05:16:0b:6d:1a:25:8e:a5:ea:
9b:41:da:64:bf:fc:de:54:89:98:6d:ec:da:07:be:
ea:9f:02:3a:a1:8a:e2:25:ca:4c:25:9c:85:e7:36:
1e:04:4b:8d:10:77:04:be:2f:01:5d:94:60:8a:65:
ae:e7:24:c7:17:a9:48:a1:93:3e:4c:e1:ef:a3:97:
18:00:18:2e:4e:95:9a:8d:fc:1e:9a:1b:79:f3:c9:
33:6d:ff:64:1d:b5:8d:41:44:0e:c1:fa:1f:84:8c:
3a:5a:44:d7:78:60:b2:1f:22:2b:e0:35:cb:9d:34:
3a:5f:1c:f0:96:88:50:f2:1d:06:4e:57:d8:ee:a3:
dc:c3:04:39:14:65:e3:f7:63:c0:96:2e:6c:0d:3f:
e5:c1:34:df:c2:e6:f7:3e:3b:49:f9:8e:44:64:14:
be:bc:3c:ec:90:ed:d0:28:3e:8a:98:ac:7b:bf:ac:
cb:35:e3:5e:55:5c:8a:ea:1c:20:8f:8f:7b:5e:53:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2A:C4:1C:59:8F:A8:0A:C5:13:8B:00:98:8B:B7:01:6E:7F:D5:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a7bb346-8820-3412-b261-1dfc04915e86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:48:6b:ca:27:8a:6d:25:a1:43:c7:82:e4:90:4d:c7:96:60:
0f:a0:98:c8:68:ac:dd:33:28:72:26:44:0b:59:e2:59:70:02:
83:1a:e0:da:92:f5:e0:32:18:1f:5e:03:5a:56:13:dc:18:5d:
9c:9f:97:41:6f:3c:fb:19:b3:52:f0:1b:ab:5c:44:6f:f2:e8:
cb:fb:53:9c:1a:b7:e6:76:51:b8:86:5c:0c:03:58:8d:31:4e:
01:14:7d:56:58:9d:a9:85:da:72:a5:14:dd:e2:13:0a:57:67:
c2:0d:4d:b7:be:16:ff:f8:04:0d:db:a9:e5:b6:69:8d:13:b0:
74:53:28:15:13:af:71:f6:e4:d4:17:b0:29:3d:a1:6c:90:91:
8d:87:87:82:13:6e:6c:99:fa:8a:23:83:35:7a:40:72:7e:ec:
31:ff:87:e4:ac:40:fc:0a:8d:ac:84:37:0e:b6:09:66:85:30:
03:c4:18:5c:12:84:21:9d:ad:96:58:4e:23:ee:37:7a:b5:e3:
da:53:60:62:19:c5:d4:d8:4e:23:d7:a0:27:a0:4c:65:ac:bd:
4b:b8:54:65:d5:59:54:0b:63:20:10:67:85:e1:d7:40:cb:9c:
b2:c0:20:0c:0f:40:d4:1e:89:c2:c0:35:13:05:86:4e:5f:4e:
f3:34:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:39 2025 by rpki-client