Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968c693b-e95a-3159-a02d-3d5e04ce1c27.roa
File: 968c693b-e95a-3159-a02d-3d5e04ce1c27.roa (raw, json)
Hash identifier: lYd35MaIl+hreQqrDerW9IPkr+fJHSuzSCRlkPCcJQI=
Subject key identifier: 20:70:49:71:9C:7E:FD:EF:2C:E8:6D:C5:C4:5C:FD:B0:19:AE:37:37
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404E63633EAAE16AD1BAF70000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968c693b-e95a-3159-a02d-3d5e04ce1c27.roa
Signing time: Tue 20 Dec 2022 18:48:09 +0000
ROA not before: Tue 20 Dec 2022 18:48:09 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:63:63:3e:aa:e1:6a:d1:ba:f7:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 20 18:48:09 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=caf05fea-8111-4562-b5d6-4404a91d03bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8f:b1:31:2b:55:85:b1:d5:66:5e:09:8a:1b:
79:69:32:1d:1a:a8:9b:f1:9d:9d:00:7a:9e:95:ec:
71:9b:31:3d:bc:8a:05:19:3f:08:bd:69:05:0a:04:
b0:2a:ad:32:f9:7b:41:d0:15:59:c0:17:4a:44:99:
01:26:4a:d2:08:78:15:ac:5e:1e:20:fd:5f:90:36:
af:5f:61:0e:3e:d5:66:a3:80:14:41:de:95:69:a3:
49:16:f7:52:bd:05:6c:30:e2:2f:77:e4:b1:10:a0:
45:be:58:8c:56:43:97:4b:f9:9b:93:6c:5a:b0:88:
8e:70:f7:31:44:60:c7:f6:88:f5:64:bd:07:f5:00:
31:b5:5c:44:e5:4d:e1:69:eb:c9:da:3f:ac:22:df:
76:9d:05:1e:eb:42:e0:8e:14:8f:c6:74:9a:2b:30:
5d:6d:4c:2d:21:32:94:5f:05:9e:a1:35:eb:d5:ea:
8f:04:a2:5c:e5:3e:37:7a:68:03:14:fc:4f:b2:c2:
92:4a:74:39:e9:18:f3:ba:60:fa:1d:83:13:8e:c6:
a8:b2:62:a1:e6:1b:de:0f:79:29:bb:58:f9:36:d4:
3f:48:56:1a:cc:c3:f8:e4:b2:4b:f5:01:10:38:ab:
9c:41:56:c1:12:fb:e1:5f:97:21:68:17:3d:e7:83:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:49:71:9C:7E:FD:EF:2C:E8:6D:C5:C4:5C:FD:B0:19:AE:37:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/968c693b-e95a-3159-a02d-3d5e04ce1c27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:8d:69:df:ef:2e:f0:0b:e7:7b:98:9d:ad:a0:84:fd:b8:ef:
0c:14:f6:7d:72:57:f2:82:5e:58:62:34:f4:e0:38:4b:3a:cf:
cd:b3:22:36:f9:87:8a:e6:a5:b3:ea:75:a0:f0:a9:94:68:f3:
a2:9c:63:e8:b0:cd:c7:39:f8:32:d6:6e:94:6c:fc:49:62:08:
25:51:db:9e:35:61:f9:bb:63:eb:36:89:7c:03:d1:86:31:68:
2b:5e:2a:96:9a:9f:e1:c1:ef:ca:48:6a:da:76:aa:27:9d:7e:
f2:75:25:91:9b:3a:48:e4:70:0e:3b:0b:2d:1e:45:71:02:9a:
7d:c3:60:8a:c1:4c:2c:e8:96:70:75:5e:55:19:13:20:f7:1f:
c6:27:40:59:fb:46:0e:2b:08:6c:01:62:7d:6c:20:b8:14:a9:
92:38:d5:d1:51:39:f2:a9:4c:e4:b5:c5:0a:3f:c7:95:58:93:
f5:a2:2a:65:58:75:52:95:fb:20:07:94:2a:e7:64:13:59:b5:
39:6f:66:51:e0:a9:1f:27:3d:91:97:6d:65:f9:ac:cc:2e:c2:
2d:22:9d:e5:dc:15:1b:f8:ec:d4:2e:dc:cd:17:ce:7c:c0:46:
6c:51:27:e3:04:76:f7:61:53:2a:69:4f:d5:af:5f:54:06:41:
5c:6d:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:24 2025 by rpki-client