Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/952f6ca1-20a6-3070-ac2d-288f257b3544.roa
File: 952f6ca1-20a6-3070-ac2d-288f257b3544.roa (raw, json)
Hash identifier: H/0OGzICyaeNLjlNxp20ppzpLG/fK0XVzR17fyTNH10=
Subject key identifier: 64:8E:74:1A:16:9B:4C:F7:18:DD:7B:CC:12:70:D5:78:4F:F4:72:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B20A99B8C06D57FA591C080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/952f6ca1-20a6-3070-ac2d-288f257b3544.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:20:a9:9b:8c:06:d5:7f:a5:91:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=266d2083-ce28-4c08-8ec4-966a93c6e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:47:c7:f1:e7:32:ec:4a:28:5f:2c:0e:ed:
cb:37:2a:c7:0f:70:df:cd:81:b9:90:da:4d:87:4a:
6d:9b:71:c8:21:a1:69:af:09:ad:c1:5d:08:ee:c7:
0b:b0:ec:f9:5c:2c:55:5a:83:a9:26:e0:5f:81:db:
7d:6f:bc:b4:52:d0:24:66:d3:be:18:d7:52:17:6f:
c8:95:2f:5e:d4:22:4f:95:4a:40:5c:23:ae:e5:66:
08:4d:6f:ce:9f:9f:5e:0c:25:71:07:60:59:9f:44:
41:74:81:b6:15:0d:36:2d:b8:8d:bf:5d:03:64:48:
d1:37:bb:0c:a2:5b:19:ca:7f:2b:18:ba:86:74:2b:
5c:7f:39:e2:13:17:1e:b2:20:89:aa:e9:0a:e1:cf:
0b:6e:7d:b1:ea:18:d4:45:83:30:e0:39:3b:83:63:
9c:bf:ce:9c:97:e2:c6:73:f9:5e:f7:8a:53:fa:6c:
aa:4d:b5:bb:b5:55:a9:0b:1e:12:59:0e:6b:5b:b9:
e9:c6:6e:19:20:9b:b4:df:a8:fe:e6:da:ba:fb:62:
7c:65:55:c8:05:2e:96:7a:27:cb:6e:1d:56:72:2e:
e0:58:b7:ce:07:8d:9e:37:73:e8:c5:64:d4:7e:00:
53:e9:14:48:1b:7f:c2:9d:dd:52:40:e1:3a:ab:0d:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:74:1A:16:9B:4C:F7:18:DD:7B:CC:12:70:D5:78:4F:F4:72:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/952f6ca1-20a6-3070-ac2d-288f257b3544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:44:d1:9b:62:07:3e:cc:eb:92:d9:95:75:85:4f:0a:85:6b:
92:c6:e1:b4:ed:e8:1f:36:19:83:22:7a:05:15:60:55:74:05:
71:4a:5b:e0:30:98:9c:f0:de:a7:99:15:7f:61:5c:24:0b:2c:
bf:90:37:d7:65:95:a7:b6:94:b5:ea:d6:9e:a4:e1:67:6e:ed:
19:a4:07:56:b9:65:e2:49:8b:85:ab:ed:f8:30:f9:48:69:2c:
59:51:09:1a:c3:b4:84:fb:57:3e:76:d3:b4:07:86:12:33:7a:
19:fe:ab:23:b3:0d:b8:da:1d:db:98:94:87:69:28:35:79:8a:
2f:f2:e1:43:2f:ce:c5:49:fa:83:ad:4b:78:dc:d5:8d:53:1a:
09:e4:db:73:37:a2:3a:2e:63:96:e3:8d:60:9b:f8:94:6f:0f:
5e:41:2e:05:d2:81:ff:ff:09:7a:1e:02:b3:5e:39:a9:34:e6:
d2:99:25:74:c0:04:23:bd:f1:7a:cb:9d:80:ec:72:51:5e:db:
a3:a5:06:f5:fc:db:76:77:d3:ef:aa:e8:21:3c:66:22:c1:54:
1d:2c:d0:24:43:5c:31:02:db:ce:12:4d:91:3e:6e:43:d4:4b:
70:dd:47:18:5c:93:0e:ab:7b:08:fe:f5:c9:6a:86:57:3a:ce:
bd:cd:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:28 2025 by rpki-client