Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f6722a6-d0bc-338d-a358-9b2b6cd21d68.roa
File: 7f6722a6-d0bc-338d-a358-9b2b6cd21d68.roa (raw, json)
Hash identifier: CYgrsWZNdCOP/e9ilNflL2ZlZV9FVDis2rBE6JeU+9I=
Subject key identifier: B9:1D:CC:77:58:34:5D:0B:64:BF:13:E6:B8:E5:71:E7:A4:77:23:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C184ECDA76714CEE9C8C92C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f6722a6-d0bc-338d-a358-9b2b6cd21d68.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:84:ec:da:76:71:4c:ee:9c:8c:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=5d97952a-6abd-4144-bc1d-156de1a7ecd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:ab:d3:e0:25:9d:f8:ce:1e:09:01:08:79:
95:e4:59:13:b4:02:8c:9f:2e:8d:a5:42:3a:92:a3:
50:14:d7:e2:da:3a:0f:e3:a6:61:3e:41:3c:58:3e:
28:ac:8f:5c:78:b6:63:fd:53:71:09:db:c6:c5:f8:
c9:be:0a:16:ac:2c:9f:5f:f1:4b:2d:cd:03:df:97:
bb:37:2d:27:ef:ea:81:31:1d:5f:b4:e0:75:d9:9f:
82:9c:46:d1:08:03:6e:cd:98:97:d3:bd:be:c2:b4:
83:15:fe:2e:cf:87:0a:5c:23:f7:22:83:fd:58:bb:
fb:b6:e7:4e:5c:58:07:86:5a:72:82:ea:e9:1c:57:
b0:6d:19:0b:70:d2:14:9f:8e:a1:96:7a:48:c8:72:
53:53:ac:66:25:9d:1d:89:8f:bf:7f:16:cb:a2:35:
b4:b5:33:ff:67:8b:58:e1:09:21:a0:93:7f:7f:be:
fd:5b:46:a5:dd:fc:03:1d:c2:f6:fc:05:48:9e:51:
c7:bc:25:d7:f7:cd:2b:83:45:59:57:5b:ab:2e:03:
e6:07:c1:15:93:33:d4:8b:f5:df:b9:0d:50:bb:81:
fe:3b:77:a7:a0:b4:8b:6e:a1:25:96:86:e5:4a:69:
96:17:ff:28:c4:8d:06:ec:aa:3c:7a:21:a5:0f:4f:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:CC:77:58:34:5D:0B:64:BF:13:E6:B8:E5:71:E7:A4:77:23:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7f6722a6-d0bc-338d-a358-9b2b6cd21d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:55:1d:0c:15:88:53:7b:a5:19:8b:cd:06:7e:64:c4:a9:f2:
85:50:63:b9:5d:22:a0:95:af:95:90:8e:15:43:54:1f:68:39:
43:59:a9:1f:bd:3b:9c:2b:14:22:72:e3:19:db:77:e5:1e:01:
47:ab:48:6a:be:23:7e:1e:8e:71:ea:58:6c:24:8d:8c:7d:73:
10:1f:e7:ad:a8:14:9e:38:0f:e6:50:ad:bc:b3:5c:93:6f:4a:
df:20:ca:96:73:5c:48:57:0d:d4:d5:79:b6:30:d8:88:28:e6:
a9:ab:8a:f2:1a:74:77:ce:71:6b:87:03:8d:47:2c:d1:bc:f9:
47:a6:12:9d:e9:6f:ce:9f:80:5d:c7:75:28:bb:8f:24:36:eb:
bc:c0:5a:19:dd:1b:05:3f:da:04:8e:9f:71:f7:15:a3:62:df:
22:ac:61:9c:0b:2c:f1:a0:f8:5d:ad:73:8e:06:b2:e6:49:a4:
6e:2f:d1:b5:36:c4:8b:2d:e6:17:74:cb:3a:7a:ea:8f:7b:e8:
6a:47:f8:d6:75:22:41:7c:52:ce:96:1c:ab:b0:cb:af:17:f4:
1c:d1:55:c1:35:57:30:3f:24:55:0e:ff:74:9d:91:f6:0d:ad:
4d:cc:ce:c6:0b:af:23:9f:00:90:41:75:e6:a5:57:fa:9f:4d:
1b:90:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:47 2025 by rpki-client