Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c76ec78-c4d7-3439-8aa7-94bc4692795e.roa
File: 8c76ec78-c4d7-3439-8aa7-94bc4692795e.roa (raw, json)
Hash identifier: oBdc9BdE/RIoCuT88KmW7teVjBEfXst1ku5M+YSExA4=
Subject key identifier: EE:91:48:0E:26:A2:01:92:4B:40:9A:E1:5F:49:97:13:9C:9C:D7:7A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C66EC3533E7B162AF5299860
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c76ec78-c4d7-3439-8aa7-94bc4692795e.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:6e:c3:53:3e:7b:16:2a:f5:29:98:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=5a0ce1c5-a1c4-475b-b485-a926407bcebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:9a:b7:f5:23:50:9f:9b:60:f9:70:d9:fe:
58:b3:e9:8c:96:3b:d8:35:13:3f:93:a2:f7:d0:47:
e4:d8:26:2a:6b:ec:0d:41:30:be:e8:c2:c0:33:e5:
81:73:fe:2d:52:29:a1:17:d5:9c:f6:c6:53:39:ae:
d8:5f:af:10:02:3e:9e:54:8c:ba:54:74:e2:07:16:
ca:1b:eb:02:f5:5c:1e:e5:cb:cc:20:26:f2:f1:75:
03:d1:c3:a2:d9:21:b7:16:5f:1a:cf:70:c7:0f:5f:
45:a6:5f:43:cd:cb:c6:35:ff:12:78:55:6b:61:f6:
e8:70:20:e7:ff:6f:1b:5e:ca:b1:cb:86:2d:1f:8b:
a9:3b:1b:d9:6f:46:c5:9a:59:13:ea:f3:dc:ae:6c:
3e:b8:d7:fd:51:cf:a3:fa:37:3f:30:44:f5:59:6a:
c9:2f:0d:16:ea:2d:5d:d4:f9:75:b2:29:c8:c5:83:
68:7b:e7:5d:2d:ba:fe:5d:3d:c0:21:8d:79:f7:88:
5e:a3:d7:e9:2a:06:88:fe:0e:b3:a9:06:ca:3a:48:
10:18:44:b9:d1:78:d8:9d:b8:13:dc:61:e2:b6:e0:
2a:83:3c:79:e2:b5:cd:50:32:99:25:36:68:7c:d7:
d2:0c:2f:37:28:a4:6e:d7:5f:3c:a8:43:4b:20:a0:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:48:0E:26:A2:01:92:4B:40:9A:E1:5F:49:97:13:9C:9C:D7:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c76ec78-c4d7-3439-8aa7-94bc4692795e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:33:73:83:51:4a:ac:58:f4:d6:6b:d9:64:32:55:a9:75:2c:
01:fa:58:29:2c:4f:94:32:1c:ec:88:7c:08:d0:81:69:2b:38:
91:c4:4e:a2:31:b7:47:ff:92:13:ee:e6:e0:64:63:61:7c:ad:
67:1a:e6:3f:37:a6:25:56:fb:8d:ab:18:22:fe:e1:51:fd:4e:
09:55:4c:32:14:0e:97:70:d8:41:63:0b:70:5c:39:99:3c:9f:
63:e6:c7:c0:42:1a:01:14:68:5b:69:a4:fc:d4:43:0e:89:47:
cd:60:23:d6:ca:76:fb:73:e6:81:2f:75:30:db:22:6d:79:69:
b3:e5:98:39:0b:4b:f2:ec:06:28:3c:ee:aa:ed:3a:29:cf:fa:
76:10:19:6e:b2:f2:68:e2:d0:0b:7f:74:b3:ba:d3:cf:9f:43:
e2:71:c8:bf:41:41:f9:9d:28:e3:88:90:25:8f:9e:7b:0c:49:
2f:cb:f5:bf:2d:3b:ff:5c:a6:22:f4:a9:10:da:bc:ed:23:74:
a3:b4:63:9d:a4:c9:de:6b:82:0a:8a:77:9e:66:76:18:2a:51:
d3:cd:7f:ae:ad:9c:09:96:c5:5c:ef:f9:d5:b9:ef:94:3c:53:
25:00:b2:b6:ef:1c:cf:ba:8f:eb:7d:a3:3e:ef:68:11:c2:10:
cc:21:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:24 2025 by rpki-client