Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8db9affc-a9c0-3d78-b5ef-bc90655244b5.roa
File: 8db9affc-a9c0-3d78-b5ef-bc90655244b5.roa (raw, json)
Hash identifier: xI0iLkyKetJtPgMF2FTVDof4NOKvRarjqVvR3aPvjDk=
Subject key identifier: 24:C9:0F:92:B4:43:78:67:F0:25:79:27:F3:FA:31:FB:85:55:1F:2F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584078AC1B4AC0326621E1310F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8db9affc-a9c0-3d78-b5ef-bc90655244b5.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:ac:1b:4a:c0:32:66:21:e1:31:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=87e217b5-05d8-4fd2-9520-79d24d9f9565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:55:38:ba:93:17:68:7e:42:d6:fa:ce:6a:
4f:77:1a:ea:2b:10:4b:07:0e:80:8c:e4:9b:cd:7b:
a0:98:ff:a9:06:74:83:8a:4f:5d:e3:b1:23:02:83:
86:3e:69:55:dd:8b:f3:62:e9:fd:ab:08:16:6c:26:
1f:64:75:5f:77:9e:33:0f:b0:9e:e4:87:b9:be:d4:
83:bc:fb:3d:2b:3f:28:b4:5c:89:f4:71:33:13:fa:
97:da:f0:cc:cd:62:d5:af:05:eb:a9:e3:df:d1:78:
92:3a:1f:30:e1:34:c7:bd:51:01:06:5f:dd:f2:b6:
af:52:bf:d0:1f:6f:4b:70:11:67:86:ce:73:26:59:
80:51:7a:05:b5:0e:c2:e6:55:2d:f4:de:de:c1:de:
1c:62:bc:93:91:2f:22:45:a2:0d:c7:4c:8f:00:39:
a1:81:46:e8:0a:30:4c:72:8a:78:c2:0c:80:b5:c0:
29:be:b9:ab:71:35:7a:fa:22:9a:25:1d:ec:b6:41:
2c:e9:4e:f5:0e:c4:7b:69:43:69:f9:95:68:0d:58:
55:f8:db:95:0f:08:67:b9:f2:79:6e:35:e5:6b:23:
25:87:c4:6a:cf:de:a9:23:cc:8c:e1:3d:35:81:16:
18:ce:66:36:28:7d:5b:74:51:83:5a:58:24:12:57:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:0F:92:B4:43:78:67:F0:25:79:27:F3:FA:31:FB:85:55:1F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8db9affc-a9c0-3d78-b5ef-bc90655244b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:08:d0:f7:42:22:9e:94:61:af:3f:d7:c5:17:7d:1d:f1:e2:
37:7a:30:10:4d:11:89:9a:c4:48:c6:d3:8e:79:8c:a7:95:87:
6b:2f:76:45:02:e7:fe:71:22:f5:cb:15:94:df:bb:03:e6:6e:
5c:62:1f:61:d3:5e:8f:88:7e:a4:8d:e2:39:78:60:7e:f0:ce:
78:98:c5:ec:3f:3b:cc:de:02:a4:ad:3f:14:69:bd:6c:5e:b1:
ec:dc:4f:24:85:1e:c7:8e:c2:66:3d:1e:bb:aa:91:c8:94:06:
8c:c9:e7:8e:8a:2e:3a:8d:a7:36:36:82:51:6f:af:5f:0e:d8:
90:10:1a:f2:4d:b8:c8:34:e8:77:73:e0:1b:f9:f3:72:7c:e0:
2b:03:b1:bf:40:ad:71:b1:07:5c:b9:a0:3e:73:8f:14:5c:5f:
46:4c:1c:70:0b:3a:f6:13:ce:ab:e4:1c:c2:04:9a:91:b0:6d:
b4:c4:5f:d4:9b:1c:74:fe:69:f2:1f:12:8a:b9:81:4c:a0:f3:
6c:c8:93:a4:37:60:46:67:2e:c4:09:a6:01:f8:16:d1:59:7b:
f9:69:8f:a0:00:b0:d8:60:37:8d:02:87:8b:da:f0:b2:6a:3a:
5a:31:cb:7b:40:bc:f0:af:c3:e5:80:b8:92:08:6f:d3:dc:09:
d7:7e:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:30 2025 by rpki-client