Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6305810d-ceb9-3077-9095-68da1ac10707.roa
File: 6305810d-ceb9-3077-9095-68da1ac10707.roa (raw, json)
Hash identifier: jI0bhnJUlvjVAXwaXTXGJhr4T35pxQB8bkRaj/FedqA=
Subject key identifier: A4:8D:68:03:09:5A:47:B5:34:EF:29:42:75:15:1E:28:78:4A:C3:DB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C3A414A852CDCB1CE6A7E5E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6305810d-ceb9-3077-9095-68da1ac10707.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:a4:14:a8:52:cd:cb:1c:e6:a7:e5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=aa899312-961e-4b45-a178-198bd8cd2281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:6c:38:02:96:80:3c:16:f6:97:07:75:d3:
d9:ca:31:b5:34:79:c1:b0:3a:92:b3:7d:49:67:46:
31:7d:7f:f0:a3:6c:7c:cf:cf:00:9c:86:4f:9e:fe:
29:69:62:be:f2:e7:36:80:59:1a:50:ff:11:be:df:
82:55:95:59:fc:9a:76:d4:4b:09:70:da:dd:77:95:
75:f9:11:06:b5:e2:8d:18:86:0e:5b:09:43:bf:1b:
6e:c3:45:a5:9d:53:d9:34:ec:a8:ed:b0:c7:bd:95:
73:0e:0b:6c:b4:8f:9f:ad:2d:e9:cf:b9:db:d2:11:
90:3f:e4:c7:04:2a:72:d9:ea:75:df:f3:ea:d0:45:
9e:f0:65:59:2d:e1:d0:24:08:08:b2:fe:40:aa:05:
23:4e:eb:ee:4a:fe:64:1e:ff:2f:08:f8:0e:70:4f:
cf:7d:1e:7f:5a:4a:60:54:0f:b7:61:d0:7a:2a:fc:
49:9c:94:20:c2:c1:dc:7e:bc:51:93:ee:83:92:81:
54:22:b7:49:bc:bf:1f:31:b0:df:b0:0e:20:d0:ce:
88:9e:35:9f:b8:c9:fb:10:02:f3:26:29:01:d5:31:
ec:3a:22:20:d5:0e:06:04:33:1d:89:0f:f8:c5:6f:
ef:51:dc:3a:29:28:78:64:b8:f5:1c:10:cb:1c:bb:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8D:68:03:09:5A:47:B5:34:EF:29:42:75:15:1E:28:78:4A:C3:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6305810d-ceb9-3077-9095-68da1ac10707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:ad:3b:ae:e8:c3:d1:89:4b:4f:13:9c:51:e7:4f:ba:91:22:
84:d4:48:0a:f4:d0:b0:11:2f:c1:c8:26:fa:b1:ed:ce:86:7d:
6f:41:b8:69:8f:df:bc:7f:00:6b:30:6b:35:dd:d5:69:03:cf:
a0:1c:69:6d:b6:0c:2b:2e:63:6e:04:77:8f:e6:b3:5d:f5:cd:
2c:2a:46:f2:d0:9a:a4:36:54:65:2d:2d:fc:53:db:a1:b8:bc:
cf:f3:20:3c:e7:61:85:f6:13:ed:ff:f1:6e:62:7e:88:5b:b9:
b1:99:30:36:8e:50:e0:23:24:bf:21:67:3b:32:15:cd:1d:ef:
95:7b:14:37:1a:c8:ea:e8:79:79:42:eb:16:14:25:ba:bb:9b:
35:33:41:81:fc:3e:fd:00:07:cc:a3:56:be:59:71:78:dd:33:
c7:3c:e2:c4:a5:80:1d:f1:74:8d:92:0e:6b:75:9f:0b:a2:7c:
f0:26:93:5d:7b:0d:9c:ee:e3:0b:02:96:7c:a0:28:db:8d:75:
db:71:01:d4:ad:4b:f4:31:43:bc:b7:b1:8e:20:c8:9d:b9:9c:
4d:5f:db:2b:9e:af:38:b2:84:49:83:cd:37:6b:88:fe:a4:cd:
02:f9:85:23:cc:f6:9c:b8:d4:92:6d:81:cc:f4:cc:e0:5f:73:
ca:e2:49:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:12 2025 by rpki-client