Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/875cc86f-4ad4-3123-9913-7d98e7f800f4.roa
File: 875cc86f-4ad4-3123-9913-7d98e7f800f4.roa (raw, json)
Hash identifier: 1SUoTLU1zYlUh9Q5Sbo1o27BB/pzT4WTLNctHwfBmMQ=
Subject key identifier: B0:D1:F9:CE:6A:81:EE:17:4A:AA:95:39:CD:E5:C3:26:F4:54:B1:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584027123A26DB6AAFE6786091E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/875cc86f-4ad4-3123-9913-7d98e7f800f4.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:12:3a:26:db:6a:af:e6:78:60:91:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=1b5d8c03-38a3-4f7c-b2c6-d9a6b187a6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:c9:5d:2b:56:5b:5b:6f:d6:8a:9c:1c:ed:
49:74:1c:8a:e5:8d:af:58:f7:94:f7:68:24:3c:89:
7c:bb:85:df:91:13:04:34:60:09:9f:1b:30:c3:e0:
b8:24:88:48:27:30:5b:7e:90:b9:c8:6c:c0:3f:e3:
51:5d:b3:2c:b2:a7:ba:86:f1:94:0f:21:33:7d:d1:
65:fc:57:3f:71:d3:2c:b6:7b:cf:b3:e8:e6:6e:51:
72:c6:65:bf:37:36:70:21:e4:1e:10:60:0c:9d:39:
cd:91:cc:35:3f:70:aa:9d:85:02:75:2a:6f:84:ae:
e6:6e:44:3b:ab:a3:3e:d3:fb:8f:8f:61:00:c5:55:
0b:a2:3f:c0:9b:94:a8:64:0a:ff:5e:18:52:d7:96:
23:d0:b0:06:98:63:7a:25:da:9e:11:1c:69:b0:63:
d3:46:64:52:b8:16:d1:b5:af:20:ea:45:92:78:01:
22:65:49:59:db:39:f8:f0:bc:12:99:6a:16:77:a3:
fb:6c:69:2a:c4:2c:61:56:5c:e8:db:fc:d0:3d:7e:
fb:9b:e0:f4:86:2e:ff:24:47:7d:c8:3e:6d:af:80:
7b:68:cb:4c:cc:3f:16:15:9f:c3:4d:86:c1:f8:dd:
9f:76:ec:bb:74:4e:be:8a:8b:86:1e:0f:26:b7:d5:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D1:F9:CE:6A:81:EE:17:4A:AA:95:39:CD:E5:C3:26:F4:54:B1:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/875cc86f-4ad4-3123-9913-7d98e7f800f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:e5:e9:31:8f:30:5d:97:b3:26:4d:e3:a7:fe:1e:65:9b:9e:
c0:80:b6:df:63:4f:53:e6:87:24:34:a8:6a:1a:48:f3:1b:d3:
93:22:ef:de:e7:2a:c9:72:10:f5:40:cb:28:34:75:9c:68:c0:
7c:5f:03:a5:2e:a7:0b:bb:a0:9b:57:a1:27:a5:19:9f:b5:72:
d0:8d:c2:61:62:f9:0d:da:45:60:8a:8f:c0:f2:8b:0e:f9:48:
e3:05:49:a1:a1:a1:67:24:ba:be:85:01:a5:a0:2b:7e:d3:5d:
60:48:1e:c9:a6:9c:ee:2f:9e:69:00:85:61:dd:21:35:09:3a:
bb:97:02:b6:28:23:f8:52:db:92:ac:8a:8f:39:72:c8:9d:bd:
44:8b:0e:a6:a9:32:13:67:ea:9d:87:61:d2:f6:35:37:b2:4e:
47:1d:bb:a5:77:13:8f:9e:d3:ad:09:01:62:3c:8c:51:1f:b3:
15:62:8e:f2:65:19:c4:88:43:d7:3a:05:62:10:15:1a:47:69:
86:e3:13:20:1f:98:73:32:2d:37:fe:ea:53:7b:fe:05:74:b9:
f1:ce:b6:82:af:4a:c9:0d:3b:59:4e:10:9f:17:53:c3:e1:a0:
6b:81:3c:58:7b:cc:f1:7e:02:c5:80:d6:8b:a2:0a:2f:9b:f2:
d2:8c:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:08 2025 by rpki-client