Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8746bdfc-ca1b-317b-a9af-1caf624035a9.roa
File: 8746bdfc-ca1b-317b-a9af-1caf624035a9.roa (raw, json)
Hash identifier: fGXmWJHQ2v2hljIyAXEcLIzhSZJmS32uMf5X8Muq+g4=
Subject key identifier: 9B:E4:90:4E:C8:7C:62:73:96:5E:E2:69:F9:57:D0:90:42:62:79:DC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409F51EB0A7A1490EB2206B280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8746bdfc-ca1b-317b-a9af-1caf624035a9.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.107.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9f:51:eb:0a:7a:14:90:eb:22:06:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=00548b23-dd10-42d9-8038-fcbd2608ae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cb:8a:ca:b0:05:99:3e:e6:df:ef:0b:f7:0c:
e2:91:c0:6d:54:85:ac:9f:ba:a7:e0:9c:fb:64:0f:
44:65:d9:9d:d4:ae:c8:e8:17:a4:06:e5:96:5d:32:
f3:28:51:b9:55:04:c9:b0:65:7e:81:41:d2:f0:db:
43:79:2e:70:13:ef:ed:dd:38:3d:5b:e6:ec:b3:00:
7f:0e:ef:38:43:dd:4f:a8:db:47:1c:10:38:66:46:
44:c9:a3:bc:e3:e3:5b:c7:e8:6a:df:38:85:11:aa:
46:8e:5d:97:36:bb:2e:2d:f7:6a:7a:3b:2f:ea:70:
f8:6f:0a:f6:8d:f5:df:57:6c:b6:a1:84:e6:8d:fa:
82:71:3e:56:48:cd:01:b3:1c:e9:83:26:e1:84:16:
0d:80:39:67:11:6e:19:cf:7e:c5:e9:c6:95:b3:fb:
84:4a:9f:d5:23:e0:83:47:6c:fd:58:25:27:ee:a2:
25:a1:e3:68:32:4b:d4:5c:4d:e2:ae:76:a8:85:03:
32:3a:21:50:c3:00:db:f9:48:48:31:42:a1:e1:1f:
72:9b:ab:73:78:9d:b4:ca:4e:70:ae:8a:d7:64:2b:
6f:8a:ed:f9:a2:38:d6:9f:c2:14:2e:6e:58:9b:1c:
b7:63:e1:c7:77:46:a8:dd:ef:4f:f5:57:fe:13:85:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:90:4E:C8:7C:62:73:96:5E:E2:69:F9:57:D0:90:42:62:79:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8746bdfc-ca1b-317b-a9af-1caf624035a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.107.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:70:3a:9e:61:6e:c7:59:de:08:fe:23:f7:1b:13:72:53:51:
a5:14:b1:ca:fc:7a:0b:2c:51:3c:01:f2:7e:31:54:a5:52:f5:
4d:a5:62:76:13:f9:da:bd:9c:b0:5e:30:52:46:6a:3c:b6:a2:
35:6f:8b:6e:37:1e:fe:d7:db:47:9f:67:a3:00:c8:8a:12:fc:
ad:d8:8b:8d:9e:c2:a4:62:84:7f:a6:c6:bb:e2:6d:18:c6:72:
ac:fb:89:25:40:38:57:b6:99:ec:56:5d:e1:cd:63:f0:2b:29:
3d:3b:e4:d4:9c:70:da:01:03:d5:30:52:bc:e2:4b:57:63:3c:
b8:87:c4:44:90:07:4f:dd:76:87:96:b0:48:b6:bd:61:28:b7:
d6:02:af:2e:5c:67:97:31:ca:9c:ef:ad:61:e9:33:83:0a:bc:
a1:01:6d:81:64:f0:39:9b:53:ab:26:f3:80:74:02:5f:8a:f2:
dc:3b:03:d3:6c:15:f6:6d:1e:3f:fb:dd:a2:b5:03:24:d2:28:
1f:f3:c9:fb:7d:d6:b2:50:ce:0a:26:49:66:15:ee:4f:f5:8c:
f5:d1:bc:7d:c1:65:ec:b9:33:29:c9:15:d3:56:9d:bd:41:82:
92:34:69:7e:f2:83:3d:d2:25:82:04:9e:a6:18:82:af:8a:1e:
bb:d5:0f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:48 2025 by rpki-client