Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9aab89b6-b31d-3d4f-b41b-404cabe0fa5a.roa
File: 9aab89b6-b31d-3d4f-b41b-404cabe0fa5a.roa (raw, json)
Hash identifier: ZQImGZpDeXz7+dWMPOE6UrX19IEiN/XahFyMmZot8AU=
Subject key identifier: 8F:07:8C:6E:69:C0:52:04:93:28:16:A0:EA:6A:2A:64:D7:EB:B2:14
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840138F359FCD27D8F4F9132700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9aab89b6-b31d-3d4f-b41b-404cabe0fa5a.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:8f:35:9f:cd:27:d8:f4:f9:13:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=360772b5-35cf-4515-b0ce-e5f236fab669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:f7:17:8c:c5:d2:32:ab:f4:94:7a:20:e4:
cb:8e:15:31:ba:35:92:4d:a6:9f:6e:34:2c:88:4f:
13:89:54:da:18:63:d9:1b:b9:52:37:88:74:ac:3a:
26:c2:3d:9d:c5:fd:0d:be:24:c3:7c:ba:53:c2:f6:
3b:0a:d6:b6:d0:a0:02:dd:2a:c4:64:ef:b8:f8:55:
62:80:db:d1:3c:b2:5d:c8:5f:97:e0:cf:21:77:43:
5c:15:44:9c:0b:32:ea:13:a9:73:31:b3:21:04:1d:
b4:2d:cf:e7:de:dc:6c:2b:ad:67:0c:e5:ea:d8:54:
dd:61:f3:a4:6d:12:cf:de:c3:98:31:33:48:04:85:
7f:1b:e5:9a:dc:ec:f0:7e:06:81:f2:42:dc:5f:df:
37:4c:07:d4:a4:9e:44:cb:0f:b5:01:62:7f:c0:8d:
8e:8d:9f:a0:04:9e:de:a1:85:c6:69:a3:4b:ab:4b:
bf:0d:c9:26:4f:5c:ca:34:49:61:f7:51:24:49:45:
16:da:55:20:f7:2c:aa:49:fa:f3:5e:af:bc:8a:68:
53:af:1c:2c:19:0b:20:63:3b:71:f1:2d:1b:1a:ce:
4e:23:bc:9d:5c:dd:92:dd:2c:44:ab:2b:19:67:5c:
4f:74:df:b6:a1:c6:b9:c6:d8:a2:d1:99:b6:de:d9:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:07:8C:6E:69:C0:52:04:93:28:16:A0:EA:6A:2A:64:D7:EB:B2:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9aab89b6-b31d-3d4f-b41b-404cabe0fa5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.234.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:0b:c8:18:eb:75:17:61:27:5c:1d:e9:fa:30:f0:64:bb:9e:
43:08:9f:0a:50:97:20:9d:79:31:5d:52:d4:65:59:45:1a:f3:
13:49:50:28:bf:ca:38:3a:41:2d:ad:ba:da:76:c7:e8:e5:91:
51:70:5e:d5:63:6b:f2:77:19:70:c8:63:a5:ba:d6:b2:17:f9:
9b:ce:81:f0:23:ac:db:1e:2c:47:e9:a9:ca:92:94:ca:0b:92:
71:fd:bd:ce:58:58:43:72:f5:78:f2:a8:66:e2:69:41:d0:3d:
53:f2:76:cf:45:76:92:81:4f:d1:3f:25:76:61:bf:ee:d2:cd:
5e:2f:2e:71:91:f5:c2:d8:ec:e4:f4:45:7b:18:e4:80:8d:eb:
87:65:68:2e:70:95:33:e1:13:95:84:ed:3d:f7:e2:b5:f8:c3:
ea:3e:7a:df:9c:12:e4:5a:39:89:2c:79:9a:ab:88:d8:04:89:
45:77:01:3b:91:f5:f2:ee:79:c0:43:0a:d6:59:3c:13:86:b8:
fa:90:80:9a:89:4c:64:38:2e:91:fa:7b:e3:13:55:db:84:c5:
ff:50:c7:9a:89:d7:04:bd:0c:46:83:c3:af:20:cf:d6:46:c8:
69:cf:a1:bf:d9:91:7d:e2:41:ec:4e:15:96:02:78:45:34:5f:
6d:49:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:37 2025 by rpki-client