Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a09a622-36c5-3798-a7e2-3feae1b52c3c.roa
File: 7a09a622-36c5-3798-a7e2-3feae1b52c3c.roa (raw, json)
Hash identifier: K5zAYnihGMHcgyrp9rwVlO50SC+weQkQhkVXDWmFNW0=
Subject key identifier: 7E:E7:F4:C8:38:3A:60:2A:34:38:05:23:EC:C4:32:60:05:9A:2A:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840734A9C7F07CD3B2E1AB6A080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a09a622-36c5-3798-a7e2-3feae1b52c3c.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:4a:9c:7f:07:cd:3b:2e:1a:b6:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=3b8ee8ab-2599-4779-ab0f-1a7d64e7a990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:d1:0f:35:6b:be:0e:97:2b:15:bd:cd:41:
79:26:6d:9b:82:35:0f:c6:33:e8:11:f1:49:c0:24:
1c:15:3e:55:55:a2:26:a9:d3:c0:3b:0b:94:0a:31:
2b:aa:23:5f:90:c6:25:e7:6d:59:3b:28:72:1d:5a:
c2:f7:28:49:39:12:3f:b3:02:c8:98:84:02:7a:b7:
91:87:b2:15:8b:a1:33:f9:d4:ca:05:32:0d:e3:04:
79:8f:35:fb:ce:8b:26:1b:71:4a:97:f6:a9:90:95:
d7:e6:56:0a:6f:52:50:22:4c:77:cc:9e:89:50:23:
5c:ff:f1:99:0a:d7:e7:1c:b8:be:a3:b0:7c:4a:f8:
3a:f5:cc:30:70:c2:27:96:14:85:03:ec:15:d7:a3:
7b:63:c1:20:f6:44:ab:b0:93:63:57:29:ac:cc:7c:
91:da:fe:ea:12:9b:d6:50:0f:0d:20:b4:67:39:36:
be:18:2d:75:10:34:39:80:96:a9:9a:3f:71:e3:c7:
a5:9b:9a:b6:a7:15:e0:27:36:7f:bb:96:19:22:33:
fa:c1:89:9a:e6:41:ad:51:fc:7a:eb:d2:17:4b:c0:
74:76:9a:f4:08:9e:ac:44:58:09:1d:ca:7b:71:ad:
55:97:f0:9c:36:29:da:68:69:57:b9:e5:bc:48:9a:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:F4:C8:38:3A:60:2A:34:38:05:23:EC:C4:32:60:05:9A:2A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7a09a622-36c5-3798-a7e2-3feae1b52c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:3a:6c:d5:38:d4:51:c1:1a:76:43:2d:f2:13:80:69:74:98:
f0:fe:d2:97:9e:a1:1a:b2:12:7f:32:cd:ed:79:6b:04:ae:73:
d7:f7:8d:e2:60:0f:4b:12:41:2c:fc:38:7b:c6:05:37:b0:18:
80:29:29:51:4b:1c:73:ce:46:c2:af:0c:8d:41:04:4b:ed:4e:
3b:82:84:22:6d:e6:a2:6d:a1:e3:07:7e:50:e3:3b:03:33:ee:
41:6c:00:a1:e5:7a:af:f0:eb:1f:a4:13:f5:1b:e9:97:bc:ae:
c4:2a:6f:a4:07:48:93:74:20:6b:2e:42:4c:19:ca:2e:f7:19:
38:d0:6d:99:6e:2d:7d:80:9e:bd:88:bf:61:f3:63:04:25:03:
16:79:15:07:79:06:b8:79:c8:57:f5:5b:e8:5d:6c:4a:5e:ae:
2f:12:04:f4:e1:ce:62:4c:4c:0a:f0:6a:7b:e2:11:78:6e:0b:
71:83:e0:e8:28:59:b7:f3:14:1d:60:ab:f6:e7:47:39:52:f6:
ac:4a:62:77:05:4d:07:8d:68:b5:ac:fc:e8:c7:30:ad:48:fd:
9a:e1:89:c3:b1:cb:c3:38:1e:9a:74:cb:73:1d:19:9e:03:ad:
34:81:55:60:90:55:3f:51:eb:6a:e8:98:b1:27:70:c4:b1:60:
b2:15:60:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:08:38 2025 by rpki-client