Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/861df39e-7547-365d-bdbf-7a2aeaba3a27.roa
File: 861df39e-7547-365d-bdbf-7a2aeaba3a27.roa (raw, json)
Hash identifier: f84ajq2xKJ8ecZiVDZtJZalZoXkunykjtVRQNSb4soY=
Subject key identifier: 03:79:12:25:3C:60:DD:48:21:12:60:71:6A:C4:C8:27:C1:41:EC:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1DE3EC675837866717396200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/861df39e-7547-365d-bdbf-7a2aeaba3a27.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 104.255.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:e3:ec:67:58:37:86:67:17:39:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=2f007b2e-b0c5-4499-bcdc-e50a70037a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:3d:fb:17:d7:5f:ca:ce:41:72:c8:0c:e5:
1d:61:5f:47:40:33:89:ff:c3:b4:77:60:83:91:d6:
a1:0c:e0:9b:17:2c:a6:42:f7:24:73:36:3b:29:d9:
96:a3:6e:e7:35:aa:1f:1d:76:1e:7e:5d:80:a1:74:
4c:48:b0:dc:c9:76:7f:59:cd:e7:fb:4e:08:a1:5c:
42:5a:14:24:cd:e0:41:62:de:29:ba:70:8a:58:cd:
ab:83:2b:12:7f:51:02:0e:f7:53:97:24:dd:29:c3:
24:6a:8a:36:30:d8:1f:61:73:17:98:72:93:ad:2c:
11:62:a3:15:3d:ed:a9:e6:5d:20:1d:e9:ca:35:93:
c6:8f:34:c1:fb:e8:d5:51:02:7b:27:a9:bb:c4:3e:
5a:0d:8b:03:38:79:98:e5:d5:6d:b0:50:c8:59:f8:
22:c6:49:ca:3a:06:38:b5:f7:0c:30:ed:1b:c0:92:
b9:75:42:1c:45:5f:4b:6e:34:c6:48:b5:c6:5f:d1:
f6:df:3f:61:3d:9c:5c:b8:06:c9:2a:6b:9d:e3:e5:
49:c9:72:56:2b:77:f7:44:97:04:64:e5:1d:b3:ba:
ca:2b:45:f5:63:97:6b:22:2f:06:2e:3c:73:a5:d3:
01:22:be:e0:7d:49:35:ec:78:e7:1f:84:14:c3:ea:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:12:25:3C:60:DD:48:21:12:60:71:6A:C4:C8:27:C1:41:EC:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/861df39e-7547-365d-bdbf-7a2aeaba3a27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c2:c5:eb:60:4a:d5:7c:ad:ba:1d:84:d5:73:ce:1f:1b:c6:
fd:a2:69:90:05:71:5e:ee:3f:70:a9:39:b8:6b:47:d7:b8:4b:
a4:1a:e7:ea:1b:bc:f1:6a:e7:c2:09:83:2b:de:af:03:86:04:
d1:b6:1a:b4:21:0d:c4:4f:7f:69:0d:c9:8b:66:fd:97:64:44:
64:af:73:6a:a5:40:cb:97:e2:b1:f2:73:12:ae:fc:35:a7:66:
9b:de:55:47:f5:d6:37:8f:46:88:9c:d1:14:66:c4:4a:27:f4:
9c:d9:08:5d:29:76:67:d1:de:b0:15:13:8a:c8:e9:10:7d:fd:
3e:67:5f:42:b6:e5:9e:2a:e9:fe:46:c7:a0:bb:fe:2f:5c:3a:
f5:dc:c9:39:3d:ef:35:a9:0c:47:18:ba:4a:6c:58:96:8e:6d:
9b:91:09:b9:57:cc:4f:b6:78:fa:10:4d:f3:3e:f0:44:cf:60:
9c:05:67:f8:b8:52:37:fd:19:a1:62:18:27:d7:d6:20:88:7e:
72:c7:0e:fe:f6:7c:cc:47:a7:0d:54:39:fd:f4:ff:e3:74:78:
86:ac:84:d4:61:f3:8d:ca:64:ab:2b:c5:05:d9:22:f2:43:eb:
85:f6:7d:00:cc:0a:49:b3:f5:1a:06:a3:07:25:b4:c1:14:b4:
9d:44:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:17 2025 by rpki-client