Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9acf5b0c-a3f3-3a6e-b9cc-f2cb51319e62.roa
File: 9acf5b0c-a3f3-3a6e-b9cc-f2cb51319e62.roa (raw, json)
Hash identifier: Q20WrJ/yYIKYBdx3r1JfHH7Re3ZmxiM3ceGiKQG4OhM=
Subject key identifier: E8:E1:D8:40:31:19:9A:E2:C7:F1:19:15:91:58:F5:C6:5C:BE:30:49
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F16C2C71A0F8F2F0F7BA12980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9acf5b0c-a3f3-3a6e-b9cc-f2cb51319e62.roa
Signing time: Tue 30 Aug 2022 20:45:07 +0000
ROA not before: Tue 30 Aug 2022 20:45:07 +0000
ROA not after: Wed 05 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 56.96.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:16:c2:c7:1a:0f:8f:2f:0f:7b:a1:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 30 20:45:07 2022 GMT
Not After : Oct 5 04:00:00 2022 GMT
Subject: CN=1e57a116-d490-4511-a280-fd8588662127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:5a:7a:20:b2:8d:3c:a8:b1:b9:fe:2d:a7:
b5:90:1d:32:8f:76:c6:4a:4c:4a:6f:27:2f:67:37:
66:d6:66:4c:fe:5a:e9:c1:ca:f4:af:c7:7a:e3:06:
7d:02:46:57:14:24:ba:be:f7:2b:58:5f:09:d1:c6:
e2:73:fa:19:9f:bc:29:71:6b:b9:b9:2f:bd:66:74:
a5:bb:43:6b:d3:91:c9:c1:56:5a:0c:13:8f:af:ed:
da:12:d9:77:55:ae:c9:87:d6:22:66:a7:30:9f:ee:
25:c0:ed:78:5c:27:82:be:4a:29:74:46:75:cb:5b:
bf:70:d7:47:63:c4:0f:13:68:0e:bd:ee:37:0e:80:
94:9e:6f:fe:a7:b5:9b:0f:98:90:c1:fb:d9:cf:fe:
73:68:74:9d:3e:30:75:c1:81:03:ed:b0:6d:fe:d6:
43:31:37:c7:66:62:41:4c:82:6b:53:d5:8a:b6:ac:
ed:5a:05:0c:e1:d0:81:0b:27:34:ec:cb:cc:0d:03:
61:83:6e:7a:f1:5b:4d:e5:55:11:40:07:5a:a5:84:
02:a6:7d:0d:86:7c:41:b5:52:af:a2:33:59:95:70:
1d:d7:df:bf:08:d7:46:cd:2a:40:a1:b1:cd:d0:db:
4f:e8:34:73:85:69:fc:d5:be:9f:e8:7c:25:54:42:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:D8:40:31:19:9A:E2:C7:F1:19:15:91:58:F5:C6:5C:BE:30:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9acf5b0c-a3f3-3a6e-b9cc-f2cb51319e62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.96.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:3a:24:12:0a:85:80:ac:78:64:14:6c:7e:82:f2:ac:b0:29:
c1:fd:9b:54:90:dc:c9:c0:c6:23:f7:17:55:17:e0:a3:f3:74:
19:94:51:70:5c:82:42:2e:20:00:71:74:93:f0:ba:b6:7f:6e:
f0:b1:21:76:db:b6:28:51:5c:08:0c:15:86:ea:9e:9a:d3:64:
a3:37:d2:e4:42:f2:8e:45:c8:19:27:5d:31:f6:43:29:76:90:
b0:11:fc:3b:cb:22:91:b6:5e:6c:cf:9b:b1:08:e5:09:9c:96:
5c:94:d6:79:e2:7a:4d:ef:7e:a8:dc:1d:cf:ae:9f:1b:43:34:
f2:3d:56:b1:62:68:17:30:ee:3f:ec:f0:b3:f8:eb:f2:4a:07:
ae:f2:84:06:ec:62:b1:a5:fc:96:ff:c9:4c:1d:c8:24:5a:4e:
b9:d6:57:fc:0c:75:f4:86:45:c8:94:fd:e9:cc:0e:c4:82:b6:
f8:ef:41:69:14:28:91:fc:17:c7:51:9f:fd:1f:31:28:f0:8c:
ac:2d:2c:8a:e4:dd:97:a8:d3:68:54:8a:1e:c1:d7:07:0a:0e:
ec:12:63:f5:b6:c0:c0:f7:f4:d8:35:d3:52:40:5a:d5:a7:e3:
f9:64:07:ed:1d:68:ab:6a:a5:17:03:d4:5a:bb:db:7e:13:c5:
d0:de:bb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:43 2025 by rpki-client