Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63888a4d-5596-3dcd-a8ba-37f1dc2a8c9b.roa
File: 63888a4d-5596-3dcd-a8ba-37f1dc2a8c9b.roa (raw, json)
Hash identifier: FgjqAZg+qUHEQNhzemwlJ7FUbziWdx5iOBxxE9c3+zI=
Subject key identifier: 77:59:AF:64:D0:9B:A3:CA:68:66:E4:04:C0:43:C3:02:D8:7B:61:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840032821471CEFCAD85A225140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63888a4d-5596-3dcd-a8ba-37f1dc2a8c9b.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 56.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:28:21:47:1c:ef:ca:d8:5a:22:51:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=f151cf87-0617-4775-a3c0-2816efdeb206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:c4:e4:c1:a6:5e:e4:2f:f2:72:d7:52:da:
9b:f7:7f:6d:6d:e7:df:dd:15:32:34:11:bf:ff:b8:
56:e8:b8:6f:bc:e3:60:b7:1f:ea:c7:8a:e4:0a:a6:
4e:ea:3c:38:b1:ea:d5:8a:5b:14:83:62:f4:be:7c:
80:73:95:f2:c2:3b:21:f9:8a:bb:e7:42:5e:05:cb:
b8:e6:d6:0e:18:a7:87:11:4d:73:7f:57:69:e9:10:
d6:6f:e6:e5:2d:be:fc:80:54:59:d0:82:2a:b8:cc:
c2:a1:a6:de:d9:25:d2:4b:45:b4:fa:92:08:58:b2:
51:45:c7:db:11:d7:b3:37:72:af:fa:68:b5:3d:65:
f1:02:25:6a:65:01:30:98:d1:c5:1d:97:db:1a:53:
1a:b6:ac:05:16:65:ee:24:37:c7:c9:24:a7:71:cb:
c6:35:d5:29:a9:92:f1:4e:81:61:5a:68:cd:09:b4:
ca:c3:48:f3:3b:d4:23:41:cb:c3:8b:c4:76:b8:f4:
c5:0c:f8:31:c5:35:e8:2d:1a:ce:97:29:53:73:24:
29:32:08:61:89:8e:c9:7d:5d:76:fc:cd:ff:01:b2:
15:e3:ee:dc:af:8e:98:4b:a0:1b:3e:93:6b:39:e5:
b7:14:9c:7f:7e:8c:ec:88:3d:d3:ce:15:e0:28:72:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:59:AF:64:D0:9B:A3:CA:68:66:E4:04:C0:43:C3:02:D8:7B:61:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63888a4d-5596-3dcd-a8ba-37f1dc2a8c9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.53.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:64:c2:85:34:bc:43:3d:6f:6e:3b:3b:e8:d2:48:07:49:75:
b9:7c:f9:c7:99:34:b5:87:59:38:c4:5c:46:2d:b4:0a:a0:d4:
93:77:f0:a4:c0:01:6f:25:ea:b4:2f:b7:2d:f1:95:f4:4e:ca:
6d:4f:bb:8d:9c:10:d8:77:1d:21:86:ad:a9:cc:3a:ad:41:0f:
ec:34:9a:70:dc:0b:4f:6d:4a:6f:a2:38:b5:5a:76:bd:b4:16:
35:4b:9b:d2:3f:3e:a5:0a:de:3e:2d:43:33:0f:36:1c:7f:67:
35:d0:3c:90:2c:6f:1f:18:88:43:36:44:2b:19:ef:ce:90:2f:
76:e9:81:42:40:4a:e0:13:b3:8c:d7:f6:48:fc:b7:e3:d6:07:
84:de:0c:62:66:ca:95:2d:dd:54:05:00:2b:85:fd:62:19:de:
6d:e4:8a:45:75:cb:41:03:8a:93:5e:2f:a5:9a:ec:ad:80:11:
4a:54:54:ed:43:8e:d4:6a:b7:5c:3a:4b:b3:d8:e7:4b:d2:19:
1d:54:5d:16:63:17:75:a8:aa:e5:ed:0f:92:5a:61:ea:e6:e3:
56:e5:5e:c1:90:dc:aa:5a:d6:97:64:de:26:5c:e1:d7:19:f8:
be:72:19:29:14:a6:7b:42:c3:92:9c:96:b0:3b:d1:05:c2:24:
8c:95:3e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:50 2025 by rpki-client