Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61e8c6b9-9f7b-3002-bb5f-dc33724d822e.roa
File: 61e8c6b9-9f7b-3002-bb5f-dc33724d822e.roa (raw, json)
Hash identifier: i6Kf4VG7OtQhRujOwDv+ojtFgGrntNSRlo4ahHZhh40=
Subject key identifier: 26:62:BE:A3:FE:53:20:4F:F4:0B:67:2A:8B:8D:3C:3B:01:C8:5B:BF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD90C58F3429E1B86A92BE400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61e8c6b9-9f7b-3002-bb5f-dc33724d822e.roa
Signing time: Tue 08 Nov 2022 12:00:00 +0000
ROA not before: Tue 08 Nov 2022 12:00:00 +0000
ROA not after: Wed 14 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.109.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d9:0c:58:f3:42:9e:1b:86:a9:2b:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 8 12:00:00 2022 GMT
Not After : Dec 14 05:00:00 2022 GMT
Subject: CN=dc057ba9-979b-4efb-8b4b-1a640744e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:92:f7:84:ff:21:f1:20:1e:43:f7:30:24:
12:28:60:b7:aa:e5:4f:08:60:a0:53:89:58:4f:e6:
23:9b:a9:3f:b6:d5:6d:f9:6f:34:d2:82:1a:ba:df:
ff:c2:2b:32:9f:f7:fe:05:e9:f3:64:b4:37:a3:9a:
41:33:6e:9d:78:d3:97:8d:b6:1e:42:18:e6:80:b9:
6d:12:e7:7f:4f:b1:fb:e7:41:d7:80:05:11:25:b1:
1f:f6:89:bd:38:cd:c1:1a:9b:21:56:d9:f2:61:0d:
33:72:76:7d:c9:50:0f:6e:1b:a3:13:d5:86:d2:2a:
b8:51:97:c2:42:6d:4a:29:ae:03:81:9f:7a:73:fb:
1f:56:38:ed:8b:ad:e2:e5:1a:fb:cd:1f:0d:a6:37:
72:fc:14:1b:57:36:ff:4d:ba:a5:52:3b:28:11:24:
fc:ca:2d:66:c2:19:4d:55:c7:70:a8:3a:3a:e6:c1:
15:4e:e7:d6:c7:93:47:84:16:f5:e7:74:9c:7d:c6:
e4:2e:57:4e:49:7b:3a:64:9d:43:75:45:57:92:e9:
c8:79:0a:e3:96:af:49:db:49:0a:e1:bf:59:02:8d:
76:a4:fb:11:56:74:37:78:ad:a3:83:dd:2a:9c:29:
99:87:ff:10:77:68:4c:0e:8d:57:79:50:0c:f1:5e:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:62:BE:A3:FE:53:20:4F:F4:0B:67:2A:8B:8D:3C:3B:01:C8:5B:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/61e8c6b9-9f7b-3002-bb5f-dc33724d822e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:91:5a:00:d3:1a:47:9d:a3:8d:22:eb:95:14:76:80:18:5f:
3e:63:98:ff:ae:3a:1c:b3:a1:d7:1b:68:9e:d4:bd:fb:54:7c:
b4:5e:b8:0f:b4:1c:a3:32:bd:e7:b3:2d:12:ea:a2:ea:a1:ba:
f1:0d:2a:6d:0f:6c:1a:8e:d3:95:c2:96:8c:88:da:2a:d7:6b:
87:d3:e6:e9:c4:5c:e6:88:6e:6e:07:12:d1:23:09:c6:9a:88:
72:35:19:b5:7d:f6:bb:24:93:27:e4:5e:48:ee:1c:fb:fb:c1:
5b:bf:c9:50:28:9d:1f:07:aa:b2:17:d0:e0:79:6e:55:a6:9a:
c2:b0:94:6d:89:d2:72:f2:50:3c:54:bd:eb:4b:c2:5d:c0:84:
03:52:67:ab:65:16:65:09:51:de:df:9d:96:2b:e2:14:48:40:
9a:1d:48:17:82:71:76:d4:6e:13:a8:e3:c4:c9:b9:08:49:09:
52:f7:22:d9:99:db:72:84:93:86:8c:e4:19:3b:cd:10:17:d3:
0e:0f:13:a2:ce:09:d9:d8:c7:5b:43:4e:75:da:79:5d:1a:76:
13:04:6d:ec:b7:8d:2f:c4:a4:f8:9a:91:24:31:85:b5:95:ef:
81:9a:9a:d5:b6:52:b2:cc:2d:7a:5b:6a:c2:97:8e:98:fc:4d:
41:1d:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:12 2025 by rpki-client