Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b8df1bb-ed43-3754-acc5-e46439d2ba0a.roa
File: 6b8df1bb-ed43-3754-acc5-e46439d2ba0a.roa (raw, json)
Hash identifier: sGwaoGN96ID9yjcCIi0JzxZw2kJjONO9jwxYQFj/HBg=
Subject key identifier: 21:B0:09:76:24:09:28:11:6B:B1:4E:F2:C4:AD:8D:30:CF:53:93:18
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409CC2E48715D46AA61DCDD600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b8df1bb-ed43-3754-acc5-e46439d2ba0a.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.98.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:c2:e4:87:15:d4:6a:a6:1d:cd:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=35a39493-98b2-4452-b03c-ec54996f522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:a7:4c:e7:47:ab:6d:e3:8c:f5:e5:43:97:
ad:13:46:cf:de:89:a6:c8:37:a0:50:7c:c0:02:c1:
a4:7a:d1:a4:77:1d:1e:80:b6:f9:84:8c:0d:13:7a:
a0:55:f4:58:e8:3c:66:62:85:96:55:c3:0d:45:03:
2b:05:2a:d1:d9:0c:ce:f6:ca:fe:f1:2b:69:81:ae:
a4:f2:f0:07:3f:86:15:31:88:ca:b6:5b:85:ea:f0:
98:b7:33:d6:24:14:93:c8:37:a0:0a:ed:1c:fd:ea:
14:2b:84:13:b6:9b:40:95:e9:21:e9:35:26:41:fc:
e4:80:b5:48:33:3e:e2:39:f5:37:98:bb:c6:b5:df:
77:05:5f:91:63:f1:50:38:64:9d:85:31:a3:e9:32:
5d:75:1f:7a:11:5b:8b:c2:0f:dd:9b:91:5a:ed:21:
a0:c8:bf:9c:2d:53:de:61:cb:6d:73:37:18:bc:1d:
4a:31:21:ac:fa:6a:02:cc:75:45:b7:d3:4e:63:94:
44:94:b1:fa:a8:f1:4b:7d:c3:32:e8:94:52:bb:fa:
f4:b2:94:b2:3b:b7:95:ed:00:a0:fc:26:6c:c1:46:
0d:9d:ed:76:e5:c2:f7:0b:31:79:2b:ab:a0:ca:b9:
d2:90:91:65:41:52:a1:fa:d0:4b:d1:d7:01:64:18:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:09:76:24:09:28:11:6B:B1:4E:F2:C4:AD:8D:30:CF:53:93:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6b8df1bb-ed43-3754-acc5-e46439d2ba0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.98.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:9b:5d:40:7c:de:66:31:b7:10:a7:b1:56:3f:9b:5c:93:c4:
f2:1a:ca:75:61:5c:c4:f2:4a:a6:f5:29:14:1e:3b:d8:df:d3:
98:ee:2d:05:3c:ae:b6:8c:e1:b3:60:b5:5d:1f:6f:95:24:fb:
44:5f:00:c5:b1:0a:3e:0a:42:b7:c5:22:d1:62:f9:cd:fe:c9:
63:6e:9a:b1:ce:03:26:d7:40:08:03:73:13:55:fa:74:2b:e1:
5c:3e:9e:86:21:01:6c:b5:66:7c:f4:9f:92:87:6f:6a:51:1d:
af:89:83:2e:2d:ce:0a:3b:f5:0a:50:88:66:a9:19:25:2d:5a:
72:0e:66:58:f7:7f:24:49:84:47:f6:c8:47:77:5a:d5:af:1c:
05:0b:67:92:5c:dc:d7:cc:b7:58:22:1f:e8:87:fd:e3:46:e6:
b4:f1:28:74:de:a1:52:27:bd:fc:ac:31:9d:78:43:5f:3a:96:
44:0c:5e:53:40:e8:7b:8f:12:10:b1:60:0c:0b:6a:56:2b:c9:
17:cd:ce:13:65:a5:91:db:77:92:c5:a0:17:dc:37:a3:dc:c4:
4d:dc:de:12:a3:2e:8a:9e:ef:8a:dd:26:ce:e6:1b:ff:33:ce:
25:a8:44:ea:4c:bc:b9:7c:28:71:02:30:07:f1:23:c0:8b:78:
50:50:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:10 2025 by rpki-client