Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70db7b77-de7f-3bb7-8c2d-6a1198148929.roa
File: 70db7b77-de7f-3bb7-8c2d-6a1198148929.roa (raw, json)
Hash identifier: /F9U5lEbJ9jJM35voBnRQzVuP4sD3B8qxJzFWaHAL4E=
Subject key identifier: 96:A9:1E:5F:D1:BB:76:EB:A7:CB:B9:27:7C:A5:59:10:2E:CE:9F:2C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D711759D721609C0A33D9328
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70db7b77-de7f-3bb7-8c2d-6a1198148929.roa
Signing time: Tue 07 Feb 2023 12:00:00 +0000
ROA not before: Tue 07 Feb 2023 12:00:00 +0000
ROA not after: Wed 15 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 56.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d7:11:75:9d:72:16:09:c0:a3:3d:93:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 7 12:00:00 2023 GMT
Not After : Mar 15 04:00:00 2023 GMT
Subject: CN=68a8e6b8-e205-4335-9a5d-4e2ddd36978e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:da:aa:ee:76:cd:02:d6:83:11:86:1e:09:
88:dc:70:5d:6d:3e:ca:38:21:78:8c:55:c1:77:76:
3d:d3:58:87:71:54:f2:45:9a:c9:5e:94:92:24:fe:
6b:3d:98:cd:b9:87:17:28:43:84:58:b9:92:18:60:
a0:1b:c5:67:80:9f:8d:2c:af:0f:f9:8d:8c:1b:89:
ac:ab:bb:79:fa:58:67:4b:81:27:09:ed:72:61:b9:
d6:47:b8:d4:7b:a8:0f:11:69:30:23:e1:c0:40:6c:
ce:48:99:6d:3d:78:4d:2c:fa:9d:fe:b6:63:94:15:
3f:1d:81:64:d5:e2:c3:87:55:95:57:84:95:55:a5:
81:b7:9c:38:61:49:c3:64:1b:ca:94:7d:b8:8d:c3:
f8:a6:45:86:19:97:e5:ec:cb:33:c1:0d:a1:08:90:
c4:52:28:bc:de:e0:af:ff:57:b9:db:fc:02:32:c8:
9a:f2:ce:14:47:32:16:f8:5a:f1:e1:30:96:f1:2b:
e7:20:a7:0c:73:46:39:5d:09:ca:3a:c0:b0:e9:63:
b4:d3:06:57:27:4e:93:ae:85:9b:b5:f3:16:56:16:
49:02:be:99:ae:04:9f:8c:ab:37:53:be:52:3f:b7:
39:b3:de:36:22:3f:4c:aa:10:25:fa:31:d4:6d:66:
8c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A9:1E:5F:D1:BB:76:EB:A7:CB:B9:27:7C:A5:59:10:2E:CE:9F:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70db7b77-de7f-3bb7-8c2d-6a1198148929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:cd:61:9a:74:cf:a2:93:22:ba:ab:2d:34:8c:d4:48:af:cc:
6a:e9:da:a0:c9:8a:41:a4:2b:ca:bc:53:c0:f1:f9:3b:36:10:
7f:b9:5b:bf:6c:7c:68:52:ca:8b:b1:bb:1b:8b:ca:b1:a0:23:
2c:6b:1f:00:12:1a:65:90:2b:6a:2d:cc:63:b2:36:f0:a2:da:
cf:d7:3d:7e:65:17:41:b2:13:96:99:03:de:89:09:ae:f7:0e:
93:91:6f:44:5e:41:1e:ff:31:ee:2e:3b:03:04:42:07:30:d8:
be:74:b9:32:a6:92:c6:c7:df:ae:46:f8:30:e4:ba:66:58:1b:
c2:7d:b5:fb:01:93:35:05:7a:cd:e8:23:0a:53:55:60:18:2f:
13:e8:b0:17:77:9c:b1:3f:1e:91:33:27:3a:cd:c1:ef:a0:46:
f8:2c:c0:5f:2e:4f:f1:ad:7e:0b:0b:a2:d6:05:8b:ff:24:47:
a2:c1:4e:51:d3:50:4b:cb:bd:83:97:99:7a:99:84:61:6e:72:
fc:59:1a:8d:be:49:9c:59:21:0f:ac:9e:48:1c:59:7b:3d:d5:
81:b0:45:fb:01:97:d6:61:4d:2d:f3:63:c3:e8:f3:b9:e8:9e:
9d:4a:88:61:64:6d:5b:e9:60:8b:ea:79:29:4a:b8:d5:2b:d5:
27:0d:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:10 2025 by rpki-client