Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c71134f-e4cc-3a78-a761-aa4ba1daddcb.roa
File: 8c71134f-e4cc-3a78-a761-aa4ba1daddcb.roa (raw, json)
Hash identifier: j57xq8d6+eTM+B/DaFVZ41Tx6QNh+sKYMCx5Q6cCi0c=
Subject key identifier: 40:FB:8B:CC:D8:61:7F:C6:1B:B5:64:6D:C7:63:6E:97:02:EF:A5:2D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8B0DD6B24E484F3BFC466C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c71134f-e4cc-3a78-a761-aa4ba1daddcb.roa
Signing time: Tue 11 Oct 2022 18:48:07 +0000
ROA not before: Tue 11 Oct 2022 18:48:07 +0000
ROA not after: Wed 16 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 56.98.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8b:0d:d6:b2:4e:48:4f:3b:fc:46:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 11 18:48:07 2022 GMT
Not After : Nov 16 05:00:00 2022 GMT
Subject: CN=04978fe8-442b-49f3-b308-0c5964f0d8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:2f:ca:30:61:14:44:29:2b:03:fd:de:66:
86:b4:a1:19:a1:c7:81:17:e3:15:b7:25:6f:6a:8a:
0d:6b:87:be:b1:8f:fd:18:82:f3:69:3a:12:28:e2:
35:4e:6e:42:5c:ae:b9:b7:a0:d4:0e:8f:73:dd:b0:
59:59:ee:08:31:11:9d:45:08:41:f1:c2:f3:51:2b:
81:ad:b6:6a:12:9f:6b:b4:f0:68:62:6f:ea:b5:98:
a7:3d:dd:cf:99:98:77:7e:fc:3d:8c:5b:1b:6f:09:
ed:4d:87:86:46:de:82:09:4c:5e:fb:90:70:61:3f:
d5:fa:ee:c9:47:23:8f:e8:13:c2:a0:54:93:da:51:
31:f3:15:25:96:7d:17:af:2f:30:07:05:16:88:90:
43:8b:c5:ca:18:8d:16:e2:22:7e:b2:2d:d1:42:4d:
18:2c:53:95:a4:33:a7:0b:ef:47:73:b5:78:36:cc:
11:23:e4:3f:fa:52:09:cf:91:5b:57:b8:7b:7b:bd:
44:9e:ce:84:24:1d:ed:f7:73:04:15:34:38:1d:c4:
76:93:3a:22:eb:d3:73:8c:43:a4:27:d5:17:13:69:
aa:3c:ea:07:45:ff:9f:3e:dd:de:45:c9:69:bb:a2:
48:af:cf:dc:85:92:34:16:e4:33:22:3c:36:80:72:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FB:8B:CC:D8:61:7F:C6:1B:B5:64:6D:C7:63:6E:97:02:EF:A5:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c71134f-e4cc-3a78-a761-aa4ba1daddcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.98.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:2b:14:f3:ce:ac:7a:55:3c:fa:f2:aa:37:ac:cf:bb:18:f4:
21:ac:a7:a7:b2:a0:da:3c:5b:ca:66:b3:d1:5c:70:88:46:80:
38:e6:e0:61:8d:4b:90:39:93:93:f4:09:db:d3:23:58:02:cd:
c5:6b:29:b8:fe:f4:94:9e:9f:08:56:e2:4f:20:eb:10:f2:98:
b7:0b:60:b4:2f:09:19:83:d1:bd:d6:71:97:76:4b:25:69:04:
4c:55:5c:69:e6:df:d5:77:f3:2b:f8:aa:16:c7:45:ad:52:86:
3f:79:c4:c9:10:48:1f:05:12:1e:f5:33:6e:7a:f5:d4:b8:51:
35:ad:30:01:5d:e0:55:68:94:30:ee:9b:6b:ca:d4:07:16:ff:
56:14:ed:bd:75:0b:10:b9:f7:fd:b7:02:d6:23:98:6a:43:0d:
d5:ff:fe:5e:b8:5e:3d:ec:62:0c:09:78:af:1f:8d:4d:31:f0:
83:a1:23:9b:a3:76:69:d1:1f:ee:ed:27:c7:75:c0:48:96:b5:
8a:9d:cb:97:6c:ef:d7:f8:d3:e6:c9:a8:dd:9a:c8:74:40:6f:
19:4a:e6:20:f9:50:ea:a0:70:da:f6:53:87:56:b5:de:5f:9c:
88:16:69:2c:c9:e5:ec:7d:ac:0d:5c:09:c4:9f:b6:1b:6e:9e:
f9:a9:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:23 2025 by rpki-client