Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65d865f8-1d02-3439-85db-15d9a2e700a7.roa
File: 65d865f8-1d02-3439-85db-15d9a2e700a7.roa (raw, json)
Hash identifier: FgJdkq8/7gYfDNrA7i/dxUDY7PMPA8AyEJ7gW8qkunc=
Subject key identifier: 38:08:32:B9:75:31:D1:92:3C:EA:7E:ED:27:66:FE:60:C9:59:CC:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402A18A4C8A993594BBEE2FC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65d865f8-1d02-3439-85db-15d9a2e700a7.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:18:a4:c8:a9:93:59:4b:be:e2:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=38b9b195-07db-4ddb-8eb5-9270016e4edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:44:b8:34:2b:bd:1a:3b:c9:3f:15:91:c4:
82:58:e8:0c:e4:3c:b0:3d:fb:a2:07:f5:e6:79:10:
f2:ab:96:a0:63:7e:1b:74:44:d1:c4:43:56:94:67:
07:05:9d:6d:f5:b1:d4:d4:99:68:12:33:f0:59:42:
e4:32:fb:bb:74:1e:e4:2b:8a:f4:d9:ce:f1:b6:10:
3f:f5:a7:4a:73:41:13:62:a6:24:70:57:ff:ca:d5:
5d:60:68:00:8a:a2:9f:6c:16:b3:73:10:0b:17:b3:
fe:52:1c:50:9d:cf:d7:03:8c:59:bb:11:96:d1:00:
67:4d:16:e3:e3:40:ec:1f:06:0e:7f:3c:93:c8:fe:
51:0e:f5:f5:38:cf:55:5d:02:22:6d:06:ca:60:e7:
c1:7b:41:89:f9:13:49:fc:9c:79:b0:d1:e6:8d:e4:
8e:e3:6a:4d:ca:bb:0b:6b:14:26:89:46:ad:ef:c7:
36:7a:f3:1e:18:44:2f:6a:71:41:d7:7b:be:ea:81:
4a:44:39:cb:a4:6c:aa:74:f7:58:de:79:f6:72:1f:
ea:e8:69:d2:83:20:99:44:62:c0:b9:7f:2d:3d:ad:
b4:5d:4f:40:8b:66:e8:24:9a:bb:33:bc:33:df:4e:
70:27:76:b5:ed:bc:a5:1c:12:0f:0d:da:5e:a3:17:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:32:B9:75:31:D1:92:3C:EA:7E:ED:27:66:FE:60:C9:59:CC:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/65d865f8-1d02-3439-85db-15d9a2e700a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:56:8f:43:41:89:fb:df:fc:12:c5:6c:2c:f8:83:51:73:c8:
2a:aa:a0:69:2b:50:79:7e:32:09:bc:7b:37:96:e6:49:7e:b5:
51:c5:3c:a3:9f:ca:33:6d:2b:30:cc:c5:f5:66:c3:9d:82:5f:
4d:02:be:6a:31:9c:7d:7d:e3:ab:33:c5:40:0a:a8:9b:81:d1:
bc:9a:36:c6:c7:43:f5:06:12:bb:78:76:27:8d:6d:62:eb:be:
c9:9c:dc:70:b0:ff:1a:9a:5d:2b:02:52:10:c1:8a:84:09:2a:
09:c6:43:1a:66:ea:9c:9f:45:07:fb:29:6b:9a:ed:da:5d:56:
33:dd:ab:a7:c2:5b:9b:a7:40:5e:d4:0b:73:2d:14:cc:41:4d:
9e:24:4f:6c:02:00:8c:1c:87:0d:45:13:93:08:6f:7a:79:08:
89:9a:68:bb:61:47:01:cd:76:ad:2a:c5:c4:6a:72:24:1a:b7:
16:c5:2b:ba:22:15:13:4a:5d:36:7d:bb:91:c7:e6:e2:ab:20:
6e:0d:b6:02:df:ea:07:94:f7:a0:5f:0b:25:d5:6f:17:67:be:
c4:5e:c9:24:76:dc:fe:fb:e8:de:fa:cf:01:27:a6:be:82:53:
fb:6c:57:cc:f9:20:a1:d8:fe:81:1d:8e:39:45:a3:6d:99:01:
94:c3:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:53 2025 by rpki-client