Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/895a85e6-c5f9-30d0-a01d-3d5a7121b5b8.roa
File: 895a85e6-c5f9-30d0-a01d-3d5a7121b5b8.roa (raw, json)
Hash identifier: CmWxRa/hqw4kgihfvjittmwpc+mcEzcF0ppBhPdsji8=
Subject key identifier: E5:DF:E8:91:E2:9E:08:EC:9C:FD:A1:A5:17:3E:D4:1A:06:D4:2F:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400398070A5F3D61F233D9AEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/895a85e6-c5f9-30d0-a01d-3d5a7121b5b8.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:98:07:0a:5f:3d:61:f2:33:d9:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=f9342d59-8f01-4a7d-af27-bd2627060bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:fa:39:b5:13:af:07:6b:f6:5f:c7:22:03:
76:ab:6e:8e:39:29:00:62:d7:ae:48:00:94:78:50:
55:ea:57:f7:99:19:8a:3d:90:e2:82:28:73:1b:41:
da:58:86:11:43:03:b5:cc:21:ec:a8:7a:cf:fa:b7:
ed:9b:36:89:b7:ef:98:4c:2d:57:00:35:1f:36:6b:
61:46:14:8d:49:9f:7a:25:4f:47:1b:00:ff:94:1e:
f7:9d:c0:77:1a:88:89:9c:12:20:e4:17:ed:e3:2a:
76:6d:1c:05:ca:b9:0f:ac:3a:55:e2:72:02:0b:39:
f5:02:ad:69:3e:03:7f:82:01:2e:a6:d4:2e:5c:a7:
8e:94:97:95:46:26:7b:ef:bc:03:a3:6f:06:a8:50:
b2:10:69:76:6f:4f:9f:0c:d3:99:5c:3c:13:08:ce:
40:72:83:af:15:ff:d8:23:46:cc:91:c7:af:1c:1b:
ca:02:f3:f9:54:5d:9b:e4:5f:a0:3f:e1:14:2d:2f:
91:46:25:36:16:ec:0b:29:78:5f:61:5e:4d:4b:9b:
7c:34:bd:92:17:28:86:2b:16:cf:a2:b9:ce:81:32:
0e:1e:b3:4e:c6:a8:f1:aa:f8:2c:74:07:97:d3:8b:
6d:2e:56:21:32:70:01:86:3f:77:8d:c1:62:cc:0a:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DF:E8:91:E2:9E:08:EC:9C:FD:A1:A5:17:3E:D4:1A:06:D4:2F:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/895a85e6-c5f9-30d0-a01d-3d5a7121b5b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.199.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:07:f3:27:13:84:f8:d4:a0:25:e0:4f:54:58:ba:ba:85:1a:
9d:1f:37:89:38:d0:02:6c:00:17:35:5d:ee:a8:37:fc:45:3e:
fb:70:4f:be:b8:25:14:22:c6:31:fa:00:e9:d7:56:d6:62:f2:
5b:fa:8e:75:e3:41:ea:1f:a9:aa:b2:f7:04:cf:d0:f4:e1:7a:
5b:e8:cb:cc:1d:12:cd:0e:82:73:15:9a:db:85:05:55:8b:61:
58:0a:fd:e9:c4:d4:07:1e:77:83:2a:c8:17:01:8c:31:f9:f8:
b8:cb:dc:3e:ee:29:58:47:55:33:8b:dd:a7:d2:44:61:75:f0:
23:77:6b:f7:5f:8a:4b:2d:0a:0f:2a:30:2c:9a:f3:34:22:10:
7b:27:ce:a6:36:1d:c6:35:f0:5a:04:b8:52:25:49:23:93:64:
bf:23:60:7b:23:0f:72:1d:ff:bc:e8:89:fb:15:5c:0d:02:4e:
e8:aa:b7:7e:19:d5:56:d3:9b:d9:1b:c7:57:a3:73:c8:1f:df:
9a:21:14:03:5d:6d:96:fd:c5:03:ca:9b:d7:3c:95:c6:bc:09:
81:e9:25:37:20:ad:c5:77:b6:24:58:d8:72:09:a1:34:ac:73:
ea:66:7a:db:45:eb:e4:fe:48:a5:6e:65:ff:99:d0:c0:ad:06:
f7:58:dc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:55 2025 by rpki-client