Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/856761ae-db1d-3718-ba95-0d64fab70ac0.roa
File: 856761ae-db1d-3718-ba95-0d64fab70ac0.roa (raw, json)
Hash identifier: 2V3JhZoowtlzQRuLZzSdCSzYJBW/JPehuIkrwHXY9D4=
Subject key identifier: FD:4C:D5:BA:F0:39:75:7B:5B:65:8F:F2:7A:CB:CF:7D:6C:BC:D3:C2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DEF7A3996D9C29BDD43DE0840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/856761ae-db1d-3718-ba95-0d64fab70ac0.roa
Signing time: Mon 16 May 2022 12:00:00 +0000
ROA not before: Mon 16 May 2022 12:00:00 +0000
ROA not after: Tue 21 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 56.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ef:7a:39:96:d9:c2:9b:dd:43:de:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 16 12:00:00 2022 GMT
Not After : Jun 21 04:00:00 2022 GMT
Subject: CN=18739740-46ac-45b2-998b-1aa6ee70d964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:33:47:e6:62:89:68:aa:aa:d5:d0:a5:e9:29:
ed:c4:05:16:5e:28:f4:1c:44:53:d8:94:31:39:76:
ef:a3:32:cb:b2:2a:f7:9d:33:7b:1a:14:ec:7f:77:
27:c0:2e:ee:da:1e:09:50:d9:8b:64:85:06:9a:89:
79:03:b8:26:ba:29:16:c6:ed:76:85:60:37:d2:9b:
f5:bb:76:bc:33:4f:f5:03:f8:a1:be:8d:2b:88:cc:
5f:b1:e8:66:d1:4c:1a:76:f3:95:09:55:79:46:49:
07:3a:50:19:6e:e2:45:3f:02:09:ed:5e:0c:e3:ef:
1f:07:b7:24:3f:1b:be:e7:52:70:a3:14:b8:58:12:
02:ed:46:9d:2a:2f:43:92:60:d5:d5:ff:96:12:31:
73:2e:d6:37:ad:41:20:57:4f:50:88:5a:6a:70:52:
8f:5f:53:e9:95:08:cf:0f:26:dc:89:43:2a:ed:27:
43:11:5d:8a:53:ec:63:e1:ba:f2:17:2f:c9:ce:ca:
f4:a1:85:de:da:95:89:86:fc:b5:1b:d0:7e:38:d7:
a9:07:6e:65:a8:9e:ab:ba:c7:58:b5:1f:f8:53:6f:
4b:05:cf:58:53:28:37:72:bc:b4:a9:29:22:a1:ac:
ca:00:27:95:2c:cd:ce:b8:dc:00:a3:1b:83:ce:7e:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4C:D5:BA:F0:39:75:7B:5B:65:8F:F2:7A:CB:CF:7D:6C:BC:D3:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/856761ae-db1d-3718-ba95-0d64fab70ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:cb:aa:98:c8:ab:68:64:5e:6e:c9:df:f2:82:e4:2c:01:af:
84:61:18:be:b9:a0:38:61:ac:f8:fe:67:71:b2:40:08:d3:4f:
80:51:16:43:ac:78:cd:ca:d6:8b:9a:6f:b0:b3:38:12:3d:47:
1b:0f:e9:dd:6c:33:f6:02:c0:1e:b5:79:cb:88:ca:24:34:f8:
c0:b2:53:4b:2c:00:05:23:0c:6d:96:f8:2d:e9:a9:7a:d4:0a:
4b:87:d7:4a:bf:d7:82:c3:13:f5:30:6e:07:7a:9d:fe:de:ce:
e8:0e:33:fe:0f:87:41:24:3b:14:71:4f:1e:6e:d9:d7:d2:c9:
0c:3a:e7:37:59:3c:de:92:27:7f:62:1c:c7:41:93:8c:a2:71:
02:2c:ac:ce:ad:7c:f2:bb:16:b8:51:ce:6f:0d:7e:49:7c:b8:
b2:c8:e9:34:76:09:f7:9b:0f:b0:6c:60:de:53:93:17:d4:01:
05:8c:a1:53:aa:4d:ab:b2:55:a0:c8:f5:bb:61:9e:68:07:29:
2f:77:e0:ae:36:d9:8e:8d:e4:f3:21:f0:6c:5d:d6:9b:81:6a:
3d:c3:6b:ae:bf:a4:eb:f0:d8:be:b3:05:23:3c:31:66:0c:1a:
ba:28:2b:ce:38:dd:73:0e:ef:4d:39:9d:36:a5:72:5f:37:55:
9c:c1:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:03 2025 by rpki-client