Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6676dd8a-af6f-3c9b-9c6f-8201379b8560.roa
File: 6676dd8a-af6f-3c9b-9c6f-8201379b8560.roa (raw, json)
Hash identifier: umZy4bYHht4veTFkPaGN9dPG7XCw9PDGlF6jkTpJ4jc=
Subject key identifier: 3A:DF:E4:E5:95:42:B9:58:A3:17:8A:56:A2:F4:FA:93:E1:A0:7D:AA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402ABC5B62B027EC672E9F6980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6676dd8a-af6f-3c9b-9c6f-8201379b8560.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:bc:5b:62:b0:27:ec:67:2e:9f:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=388f2fe9-1853-4f4c-ba0e-91c9c71b010f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:33:13:31:9d:73:41:0a:d3:40:51:11:2d:b5:
e1:86:dc:08:c2:5f:83:40:06:09:e3:a9:49:f3:b8:
aa:fe:15:50:01:cf:66:80:14:7d:b7:de:30:e3:ab:
3c:51:94:dd:c2:3d:8f:87:5d:a7:bd:70:99:b2:7f:
35:88:7c:bd:56:5d:41:a3:85:ba:f7:a3:0f:b6:8d:
04:5e:00:91:e5:e3:e9:23:25:f8:fe:48:fe:12:27:
a2:d1:50:0d:54:2d:24:f6:70:05:05:18:90:05:99:
89:6b:2f:ff:23:77:da:9e:fa:57:92:10:82:44:a7:
98:6d:ed:1d:a3:a2:ed:34:e6:40:48:5c:8c:79:00:
ff:b7:8b:3a:aa:ec:fb:63:51:9b:3a:f0:37:68:01:
8a:e0:b4:c0:81:c2:58:b9:64:dd:56:e9:d1:7f:2d:
35:6b:bd:c6:eb:a2:0b:bb:f0:f0:93:b0:35:da:77:
23:95:3f:1c:e9:86:ed:73:d4:35:88:06:5e:f4:a3:
19:f1:6f:b9:0a:d8:5c:be:2d:33:e1:af:9c:63:52:
76:fc:86:bc:90:57:4d:72:68:40:53:bc:2b:6e:8d:
2b:d6:ee:06:a9:e4:a8:ad:15:6c:54:86:51:f2:9f:
04:bc:21:98:32:09:d6:3f:f9:fb:b6:9b:9c:43:20:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DF:E4:E5:95:42:B9:58:A3:17:8A:56:A2:F4:FA:93:E1:A0:7D:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6676dd8a-af6f-3c9b-9c6f-8201379b8560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:9f:50:f8:e6:c0:f8:0f:3b:35:3d:a4:9e:d9:52:64:dd:aa:
95:70:d5:c9:dc:ab:5c:a4:c3:c6:bb:89:ad:01:3c:24:8a:fd:
b0:3d:f0:d8:47:ae:b9:41:03:9a:95:ee:96:30:f5:7d:d0:c8:
4e:27:41:6c:31:d5:18:1b:6f:43:1d:5a:7b:ff:bc:4b:61:15:
af:21:00:64:b9:e2:71:78:5a:e6:ba:cf:43:8c:57:d4:e1:fa:
ae:dc:9f:f7:91:ac:32:9f:31:c3:38:33:a4:2f:87:bf:70:af:
71:80:c9:00:c5:de:b7:a5:7f:68:02:5f:1e:fe:3a:14:bc:fd:
bf:a5:5a:7d:24:a3:58:73:20:11:bc:68:32:c5:08:78:23:3f:
10:ba:a2:5b:63:10:38:11:a1:ed:7b:44:ec:75:7b:50:6d:88:
92:6f:ad:6b:ca:94:02:5c:64:eb:d2:28:d9:7f:67:03:44:2a:
10:67:7b:ab:8f:32:f8:61:8c:63:2e:c3:10:03:aa:77:ac:12:
59:54:7c:c3:b2:29:25:2d:9b:a4:54:39:d6:2c:41:7c:5b:10:
61:c4:42:59:32:c3:8d:5e:fc:24:d8:42:26:d0:23:bf:dc:7e:
1e:77:20:a7:81:4a:da:61:8f:5f:53:42:17:04:c7:74:c6:cf:
f2:9b:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:04 2025 by rpki-client