Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/698c341d-c48f-39cd-8219-f3f7471dec69.roa
File: 698c341d-c48f-39cd-8219-f3f7471dec69.roa (raw, json)
Hash identifier: FCv2aS8dc1g6hwsEIw8Mg/ug8SIGu5dZ/bHwQpmlCwU=
Subject key identifier: EF:5A:4B:AD:D6:13:56:97:01:F7:85:9F:06:48:E0:77:3B:AC:6F:54
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409FA3D52D71D3502B61650500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/698c341d-c48f-39cd-8219-f3f7471dec69.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.159.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9f:a3:d5:2d:71:d3:50:2b:61:65:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=f5b9427c-f931-4b85-9692-792382389f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:bb:8e:27:ed:16:79:c7:5e:07:fc:32:15:
2b:f1:4a:2e:15:fe:62:d2:21:e6:78:2b:61:24:50:
1e:b4:91:ea:d6:0d:18:90:be:1c:c6:ea:fe:0c:f5:
0d:c0:cd:9c:4a:c1:e5:be:be:ac:03:93:e4:24:4c:
69:db:8e:62:ad:58:a5:11:dc:35:0c:38:8c:13:b8:
71:23:a0:f2:f9:7b:90:93:fd:61:82:d6:f7:9a:e8:
12:81:ba:b4:3a:73:fe:f3:8e:2e:40:64:cf:57:df:
af:c9:3d:9a:4f:ea:13:fa:96:24:2b:d9:82:45:c7:
87:0a:1d:aa:cb:13:5e:35:54:28:2c:79:d4:49:45:
fc:fc:b7:e5:c2:88:00:6f:d9:42:5c:c3:10:6d:e4:
3d:4d:ee:2a:29:9a:8c:9f:ad:d4:2f:81:b0:2b:1f:
e9:41:56:d3:47:d0:54:e5:f9:2b:67:7c:30:12:cf:
db:a0:d1:32:32:90:db:40:96:5f:ad:7e:8a:01:e9:
91:a9:e8:c7:a3:36:dc:8a:39:94:e7:a4:58:1b:45:
38:71:b0:c7:1c:86:4e:0a:40:90:27:93:2f:86:e1:
d7:48:75:e8:be:35:09:5f:e9:d3:3f:55:e7:b2:a3:
72:a4:88:39:95:09:5e:d8:c2:92:9d:fa:24:37:ef:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:4B:AD:D6:13:56:97:01:F7:85:9F:06:48:E0:77:3B:AC:6F:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/698c341d-c48f-39cd-8219-f3f7471dec69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.159.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:01:36:e7:1c:a6:da:37:48:d2:ef:34:94:80:9e:af:3a:94:
ee:53:1f:2c:b6:16:91:9e:ca:19:d5:98:73:08:16:5f:ed:a8:
26:1f:1f:d3:32:70:52:d8:f5:a4:92:19:7d:18:84:fa:b2:8b:
b3:19:9f:32:5c:98:22:76:70:eb:54:5b:6f:65:46:6e:1a:6a:
73:87:4d:f2:8c:21:7d:91:84:76:86:1a:d8:7c:2b:41:ca:11:
cf:f4:07:13:4f:85:7f:0e:c9:a8:1b:89:45:42:18:55:20:cc:
89:8b:ed:7a:79:85:b1:0e:b0:9b:2a:b8:15:73:de:59:0e:5e:
ba:6c:82:77:50:0e:32:60:23:5e:63:87:c3:48:fd:cc:d7:ad:
09:32:a5:18:41:5c:f2:42:04:db:b1:8e:56:ab:c8:60:ed:08:
3b:a4:e9:5f:e5:58:ef:b4:7e:4e:b2:f7:46:cd:6b:44:b0:7a:
ed:ce:9f:87:15:16:40:7e:9c:e3:68:ec:15:bc:5c:6d:7b:b3:
a0:65:47:2b:6d:c5:99:e9:b2:52:2e:b6:f8:55:8b:39:89:77:
cb:d4:6e:b6:db:a5:a8:e5:45:0b:16:47:77:14:63:04:2e:eb:
a9:23:b2:8e:cd:09:f0:8f:15:78:8f:26:ac:e3:be:1b:9b:7a:
cc:74:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:18 2025 by rpki-client