Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cb0522e-4256-3bcc-8228-8f7e572d9013.roa
File: 9cb0522e-4256-3bcc-8228-8f7e572d9013.roa (raw, json)
Hash identifier: UefLQA3680Bzvti0Zf56Viw8M/oY41hLMTIdM1aamcs=
Subject key identifier: 6A:8E:91:30:59:EB:1F:5C:59:68:CF:5F:51:14:DB:FD:2C:EA:91:2A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCFA07630FA138B450142C500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cb0522e-4256-3bcc-8228-8f7e572d9013.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 158.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:a0:76:30:fa:13:8b:45:01:42:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=6c1232ef-b15e-4879-874f-c03c19359738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:06:f8:7e:cd:46:39:83:f4:90:82:68:45:
d0:25:5d:73:1b:05:74:fb:03:b3:cf:33:33:df:49:
ae:e5:7f:eb:0a:d7:4c:38:20:2e:1e:cd:1a:d0:e7:
80:af:50:02:0c:88:4b:70:04:41:1c:32:a6:71:b8:
70:92:f5:8b:72:7b:67:f3:3d:48:4a:6c:e4:b0:d6:
a3:5c:20:c0:9a:23:22:5e:f9:92:a9:5f:a9:c9:87:
39:68:6f:58:76:be:53:ad:71:e5:c2:59:43:8a:a5:
ad:e5:9a:7c:e3:18:7a:98:3c:74:c2:8c:fb:b0:e6:
1b:50:26:13:0d:91:9f:de:e4:01:40:7a:3b:7e:ca:
ee:db:29:ed:31:07:e1:24:ae:01:61:71:b0:0b:ef:
e0:42:98:b5:ed:02:d1:b2:f2:6e:9d:e2:eb:3b:7a:
1d:53:55:83:9a:18:47:a5:74:48:48:f3:17:7a:c6:
01:32:50:46:a2:c6:42:00:55:f4:6c:8d:09:81:45:
7e:7c:39:2f:be:fa:30:2b:f2:d7:ee:d7:5a:e6:9b:
8c:88:b7:a8:fd:d4:74:22:5b:80:2e:fe:50:d4:62:
7c:59:a4:a2:8b:ae:31:65:2f:8f:46:cc:98:f5:64:
41:3f:8d:06:a4:09:00:c7:c4:6f:d6:a0:59:04:c3:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:91:30:59:EB:1F:5C:59:68:CF:5F:51:14:DB:FD:2C:EA:91:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9cb0522e-4256-3bcc-8228-8f7e572d9013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:5f:52:42:f2:a2:63:36:45:f7:b1:52:44:f9:8d:f6:b9:52:
04:8a:ce:72:ee:27:f4:9e:8b:4b:64:d4:d9:93:af:d4:8a:9b:
93:e3:a4:d8:f5:d5:a3:16:52:e8:3c:97:e8:6e:76:0d:53:0c:
79:7e:d5:ec:b1:7c:a4:ae:50:02:69:eb:35:4a:2a:0e:8b:f8:
19:88:4d:84:0f:69:79:1a:1a:01:6e:27:b7:a3:55:45:f2:4a:
fc:a5:33:e4:c0:2b:17:11:63:bb:9f:fd:b4:20:0b:6d:73:db:
e5:7b:bc:ca:96:5a:22:81:20:d8:9f:ec:85:d0:7f:60:d8:df:
47:7f:d7:9e:b4:bd:7f:f9:bd:09:50:db:94:82:a9:fb:5b:be:
50:bc:1c:53:8f:17:c6:c4:c1:3c:2d:87:e7:13:c6:97:d1:44:
ef:ad:b6:df:a6:a2:03:8f:e2:1e:cf:56:d2:29:a0:66:21:ac:
66:01:58:46:a0:c0:54:d3:43:cd:c8:73:e0:ac:3e:32:13:ab:
72:02:cf:4a:8b:a7:3b:9f:15:8c:b1:38:20:b4:c9:8b:1a:7d:
b9:03:7c:b1:e2:65:02:37:67:cd:33:ff:f7:e5:68:be:ab:77:
66:b7:91:27:6e:2a:44:4e:37:76:34:1b:e8:ee:f0:43:f0:76:
9c:3a:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:02 2025 by rpki-client