Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70d5b2cd-903c-3197-8c2b-006e6b9cf5e8.roa
File: 70d5b2cd-903c-3197-8c2b-006e6b9cf5e8.roa (raw, json)
Hash identifier: SwrlFh+xVFA7dYvjt+EPFcaq1rLnLQ+SnepVcPNgJIU=
Subject key identifier: A1:AC:76:9F:C7:A4:6C:91:77:CB:4E:3E:FE:99:30:3D:61:2C:6E:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA14ED472D3F2E8DCA6713700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70d5b2cd-903c-3197-8c2b-006e6b9cf5e8.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 24 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 56.67.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:4e:d4:72:d3:f2:e8:dc:a6:71:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : May 24 04:00:00 2022 GMT
Subject: CN=d37accac-ae1a-48eb-9ba7-ccead70e8310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:a8:35:8a:1d:fb:02:ab:fd:11:7e:ae:2a:
0f:f7:ba:ff:6b:57:50:5a:a8:bb:0b:8a:20:50:8f:
71:ef:d1:40:2c:e6:f6:fb:58:7e:ea:9a:07:04:cd:
66:f5:2e:39:25:0a:fc:62:74:29:ca:0b:83:3e:0c:
b7:1c:b6:6b:3d:ed:97:f0:18:08:a4:6b:f0:7c:0e:
93:e2:9a:c6:a0:8d:6e:28:3e:a1:81:39:70:86:26:
27:51:ae:0b:29:66:a3:ab:7d:0d:ae:2b:37:b3:1b:
1c:e4:9d:19:fd:f2:cb:d4:f8:47:4e:f6:9e:36:5e:
9f:05:9a:84:cc:c5:1b:5c:8c:32:9f:e3:c0:b8:12:
04:6f:a2:72:eb:d0:60:e2:5e:18:9a:86:75:bd:ed:
d1:70:5b:8a:45:42:be:03:75:f2:c5:59:7c:29:68:
ac:68:af:d3:2d:a8:87:81:92:8b:87:77:4e:fb:16:
a2:d0:62:70:7e:df:aa:12:55:58:2f:90:14:3c:6e:
51:8a:07:33:84:5d:fe:9b:d6:f0:d9:e3:55:a5:b2:
1e:52:07:17:71:64:7f:b3:67:82:6c:66:6f:a9:fe:
a5:ca:da:e8:bd:93:e6:91:85:ad:a9:27:d9:8e:66:
09:76:80:44:de:d1:12:99:59:c7:72:05:12:5b:2a:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:76:9F:C7:A4:6C:91:77:CB:4E:3E:FE:99:30:3D:61:2C:6E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70d5b2cd-903c-3197-8c2b-006e6b9cf5e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.67.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:eb:f4:e5:2c:37:ad:55:e4:81:9d:56:19:18:a2:95:06:f5:
1e:ec:0f:77:73:ad:0a:fe:99:34:6c:00:c3:cd:40:2c:26:8c:
8d:bc:78:57:2e:31:66:64:16:79:ca:b9:39:02:e0:00:ed:45:
b9:2c:96:00:7f:a7:d8:74:a0:a0:76:f7:f3:b8:e1:28:a0:cd:
54:e5:67:45:18:38:d6:84:3b:45:fb:e9:7c:6f:5e:ea:1b:39:
07:38:6c:d8:ea:27:a4:ec:12:ff:7d:24:a2:9f:02:86:6c:68:
99:73:37:26:6f:65:c6:3c:d9:7d:6b:73:77:88:3b:c2:a4:69:
30:eb:17:01:55:ff:ee:25:0e:57:00:96:f1:39:6b:99:dd:27:
e8:1e:02:78:91:47:dc:49:30:4a:8f:27:d6:ef:e0:0a:f8:54:
07:0e:77:ce:c8:37:23:4c:6c:2b:aa:24:c5:26:59:07:cb:6c:
9e:b7:47:c5:97:84:70:ad:be:b8:a7:5a:b5:64:23:22:53:5d:
9c:c0:e7:02:75:76:5e:52:5f:f6:d9:99:5e:73:86:d4:90:b9:
86:c9:74:e1:22:d9:be:06:62:5c:52:0c:64:fb:a9:f4:09:e0:
62:23:ff:a5:fb:ff:70:04:09:77:e8:d7:03:e5:9e:91:55:c2:
7c:ab:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:44 2025 by rpki-client