Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8491c998-7d11-31a4-97e8-b1c1ca1c5655.roa
File: 8491c998-7d11-31a4-97e8-b1c1ca1c5655.roa (raw, json)
Hash identifier: cI7JT/H6W74/97NYYW7l2lVjRy5MJxYRUixVLCQjgIs=
Subject key identifier: F8:23:D6:4E:80:0A:45:BB:0D:19:33:B2:73:47:03:35:66:0C:3B:E5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584013F77508B7C762E74EDD50F8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8491c998-7d11-31a4-97e8-b1c1ca1c5655.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:f7:75:08:b7:c7:62:e7:4e:dd:50:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=b26d0d81-b864-4e21-bce8-2098af116186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f4:5b:9e:30:3f:f7:fd:6d:52:a0:4a:8c:9a:
4e:96:3a:e7:9c:be:9a:e2:54:5a:aa:e5:67:e1:10:
b2:3b:f1:dc:4d:84:1b:dd:4a:a1:73:8f:ca:06:cc:
97:2b:c9:ff:34:06:11:37:e9:b5:4f:69:c5:c8:37:
5b:61:93:38:34:2d:16:8d:25:35:9e:40:aa:a2:03:
dc:06:36:10:3f:bc:81:0f:4b:e1:26:1b:d5:96:2f:
d9:1c:77:e8:08:4e:04:19:88:3a:bd:2e:fc:16:24:
75:c2:c5:b5:e8:19:65:17:fc:d9:63:6d:10:2e:b8:
cd:0f:38:26:f0:1b:96:00:e7:a9:7e:ee:ab:a7:49:
e8:61:bc:33:c9:4f:46:4c:15:a3:76:57:cc:03:8b:
6a:0c:1c:99:1d:19:70:dd:95:0e:39:88:21:72:fa:
cb:54:06:d9:fd:22:40:11:49:3d:79:e0:0d:2e:a1:
ea:c1:13:ea:da:d3:e8:88:fd:9b:ed:91:dd:56:bb:
84:12:34:32:46:90:63:95:6c:6c:c0:19:f4:1f:79:
14:6e:1d:91:31:87:12:8c:75:68:80:9b:5d:da:4e:
6f:7a:48:d5:f3:04:ea:10:95:ef:ce:ac:a6:bc:d1:
0d:ae:f6:77:34:3f:d5:0a:79:7d:f4:b3:74:ed:33:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:23:D6:4E:80:0A:45:BB:0D:19:33:B2:73:47:03:35:66:0C:3B:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8491c998-7d11-31a4-97e8-b1c1ca1c5655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:33:ef:80:f7:e2:84:9a:42:21:9a:f4:45:d8:e9:04:37:2c:
9e:52:9e:1c:ca:7f:9c:d1:e2:49:80:d2:0d:48:93:07:1d:87:
bf:fe:d0:9a:d0:01:4d:63:be:1f:be:31:29:b2:3d:10:36:76:
a3:59:85:89:c0:c2:70:e1:ed:b9:39:33:73:54:7c:f3:69:28:
2c:a8:5e:cc:7f:7d:8e:16:ac:24:73:a3:56:25:c8:48:60:c9:
62:86:73:68:50:72:43:a0:68:a5:f3:ad:a6:ad:ec:97:e2:57:
81:49:d6:17:3d:ef:e3:3a:41:5d:9e:9c:c2:4f:ba:cc:f8:3a:
81:17:32:25:9d:36:a6:8e:c6:19:c2:32:8c:f0:34:2e:dd:f2:
17:f2:51:fa:82:fe:f3:04:23:33:dd:3c:ad:e9:45:b9:ea:39:
37:e1:d9:64:56:18:af:55:78:42:a9:72:76:b0:e1:df:38:ca:
d8:ce:24:65:3f:bc:f1:3c:b7:b8:2f:d1:64:3c:a3:6d:42:35:
98:6c:b3:8d:61:95:cb:35:9e:d3:8a:0d:df:a7:d6:5c:9f:ae:
24:5c:5c:23:d5:b9:77:a1:38:aa:dd:1e:27:55:f1:64:34:52:
d6:d9:b0:3a:17:87:ee:fc:92:72:af:3a:06:97:86:6a:18:42:
e9:2a:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:16 2025 by rpki-client