Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/844f439f-efda-3ec1-8162-40bb2c5cfe31.roa
File: 844f439f-efda-3ec1-8162-40bb2c5cfe31.roa (raw, json)
Hash identifier: Ebt3tTwFobUNFhqgZpQlyrOM3qK9JY7oAoojsoY6KP8=
Subject key identifier: 6E:A9:81:0C:79:8D:96:D3:F4:37:5A:24:63:DC:CA:9E:8F:1B:CB:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C132EE6AEFF1C1D56F2C1800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/844f439f-efda-3ec1-8162-40bb2c5cfe31.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:32:ee:6a:ef:f1:c1:d5:6f:2c:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=88a8300d-a27d-4ad4-b78c-bdbf8c22486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:3c:1e:32:b8:e3:49:c0:89:a5:5b:bd:47:
52:8c:7a:4b:f5:a8:da:b1:63:1e:7a:5a:4d:b0:1b:
b5:af:07:17:9c:6d:3f:54:57:e7:99:ff:ee:e9:95:
25:67:66:cf:55:15:87:44:b1:78:aa:7a:f4:fe:23:
c4:42:55:ff:0e:63:95:03:4a:f5:f5:34:fb:83:c8:
b7:a9:ba:2c:56:fc:b3:92:8f:3c:d4:45:18:0a:f9:
3b:f9:03:56:a4:01:f8:d1:ad:06:ac:a5:83:06:03:
27:8a:43:b3:bf:95:a2:9d:9f:e3:da:c6:9b:97:2e:
52:e6:f5:e9:d4:f3:3b:06:8a:4b:d4:d0:54:49:70:
0a:52:90:36:b7:27:b0:e3:d6:70:b4:fa:db:eb:5c:
ff:af:dd:2d:fc:24:db:41:1f:00:47:cb:eb:8e:39:
26:42:3d:2c:54:4a:c2:f6:79:a0:92:aa:9c:a1:41:
2f:68:6f:87:7a:80:14:40:aa:61:25:84:84:b7:6c:
ed:50:99:b4:06:92:96:f5:e4:e6:b0:91:41:fd:04:
c6:2b:1c:38:73:13:c9:18:d9:16:9e:fe:bb:18:81:
b3:9b:77:ed:e1:a3:44:78:73:57:64:38:76:7f:72:
62:fa:3d:26:cb:08:42:1e:55:e2:bb:83:9b:ff:2d:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A9:81:0C:79:8D:96:D3:F4:37:5A:24:63:DC:CA:9E:8F:1B:CB:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/844f439f-efda-3ec1-8162-40bb2c5cfe31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d9:28:02:92:ec:ad:1c:c7:f1:4f:01:21:ab:0e:5b:e0:f2:
9c:33:31:72:8e:b5:f6:a5:54:6f:42:45:86:27:74:b5:e1:82:
ff:1b:25:02:c9:6f:3b:98:65:b2:e1:79:af:36:5b:3a:d4:c3:
ce:53:e0:69:df:b2:74:54:99:f2:da:a6:62:65:1b:d8:57:91:
22:e1:65:d5:56:d5:df:89:aa:d6:0e:25:81:0b:ca:76:77:0c:
9c:dd:02:d0:3c:3b:ae:46:12:dd:71:a2:16:09:89:14:a3:97:
05:79:67:f8:cb:b4:f7:5d:e4:af:fd:10:77:10:2b:b1:20:ad:
8d:66:34:be:4a:1e:c6:61:1b:64:76:f1:4e:0a:11:1e:41:34:
33:8a:d6:a9:56:d6:ac:c4:85:67:d3:b2:d0:23:80:44:b0:51:
c6:22:37:0f:ff:49:c3:9d:fd:d1:00:26:0c:97:45:4c:17:3f:
1c:7a:50:0f:2c:d8:a2:00:98:b7:ca:a8:90:2c:c1:df:f3:43:
8b:3a:21:78:1c:2a:f6:62:e4:3b:b2:e7:ad:32:55:35:97:77:
47:71:fa:2f:84:97:f4:71:b5:3f:12:f6:cb:ab:35:0c:ba:f3:
20:f0:15:40:74:68:9f:4a:6f:87:0a:92:42:17:ed:c2:68:83:
9b:41:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:46 2025 by rpki-client