Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99f80f3b-f8ca-383b-b138-5df0e08e5cb9.roa
File: 99f80f3b-f8ca-383b-b138-5df0e08e5cb9.roa (raw, json)
Hash identifier: 3qm6jCVVYTRMPwH/+iM5SbM7sfMBbqVus8xyKEI69+k=
Subject key identifier: 42:6D:12:73:C0:C4:77:22:3C:BE:CC:E8:60:53:2A:3D:5F:8A:7E:C9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409C4BC95EC1AABF812F631540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99f80f3b-f8ca-383b-b138-5df0e08e5cb9.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:4b:c9:5e:c1:aa:bf:81:2f:63:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=bd8247e1-4620-4dfe-bc28-6f33c28bf785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:86:a7:e8:84:9c:f3:db:b9:67:2c:e6:c6:
3d:62:c6:d8:2b:18:b6:47:30:c4:e9:e0:df:66:74:
86:a7:02:6f:e0:fe:9e:fe:c9:b1:33:6c:c3:cb:ae:
3e:85:a1:2e:8b:ad:74:ee:01:ad:dd:20:62:61:71:
33:8b:47:44:3b:b5:98:e7:31:d1:02:10:5e:81:4e:
22:f2:17:1e:a0:e3:c9:88:57:d2:23:78:51:8b:ea:
a8:0a:3f:0b:3d:61:01:ae:8d:31:01:3e:bc:18:80:
59:62:8f:1d:63:70:a1:9e:dd:e2:30:42:62:7f:77:
e5:21:1a:1c:5e:77:9e:31:dc:e4:39:59:ab:86:e4:
ee:a2:80:7d:ab:96:5c:a1:8c:24:17:7e:1e:d4:8d:
01:e0:88:44:bf:94:52:9f:87:ea:fb:d8:8c:1d:0f:
ae:2e:08:c4:f1:85:f7:9f:53:be:e5:e7:1a:be:ca:
81:62:eb:04:99:7f:63:1f:7e:c8:ee:c0:d2:a9:c8:
67:5c:55:85:83:c0:4e:a3:06:b2:49:69:87:4c:35:
29:1c:8a:4f:8c:ae:6b:24:7c:66:e3:d0:eb:4a:9d:
84:0d:4d:da:68:af:ca:5b:e5:68:93:a4:ad:1b:d9:
e4:11:c8:e4:40:de:a8:ae:14:73:ac:82:6d:5c:23:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:12:73:C0:C4:77:22:3C:BE:CC:E8:60:53:2A:3D:5F:8A:7E:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99f80f3b-f8ca-383b-b138-5df0e08e5cb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.133.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:69:92:23:93:00:c1:08:e2:1b:47:3f:ed:58:ae:b2:83:05:
20:b6:c2:09:11:7a:f4:1e:f8:1b:9b:85:40:74:38:03:0c:a7:
0d:8d:95:4a:f0:d3:d1:00:8c:b9:22:9d:cf:ec:61:37:95:f7:
3e:18:b5:b8:23:ad:9f:e2:35:b8:1a:92:60:c5:f6:99:3d:47:
07:d2:a9:48:a4:08:1b:a2:ec:6a:ae:e7:16:ba:4d:0f:6b:ce:
29:25:22:2f:a3:3c:06:aa:73:63:0e:95:ab:ab:5a:93:74:46:
48:b8:01:2c:72:a3:2c:64:b9:0f:f0:f5:10:ad:63:e2:b8:e0:
73:10:1e:31:1b:ec:62:3e:43:94:32:e4:46:8f:c0:28:9b:27:
9d:28:74:ea:de:88:24:f7:6c:ef:cd:d9:17:5a:a0:4b:d8:70:
10:28:36:81:21:21:e7:1e:e3:79:95:18:31:89:23:32:38:8b:
ce:ce:9f:f3:04:e3:4a:a8:5f:17:bc:fa:9c:ed:f4:50:9d:1f:
e1:68:35:1f:81:37:04:72:78:4f:ea:32:38:fa:5c:a1:2c:c4:
ec:35:1f:59:42:15:ac:89:ff:62:3d:49:d9:53:9f:2c:6d:81:
18:e7:41:4d:ce:c9:62:04:5f:04:f2:40:c3:61:20:18:6e:26:
95:32:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:38 2025 by rpki-client