Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a53117af-329b-3eb4-affa-849a2f16e5fb.roa
File: a53117af-329b-3eb4-affa-849a2f16e5fb.roa (raw, json)
Hash identifier: Xt/hVQ9IP45kfysAgS5a/AH5vlKGaDrNiB2sXzyyqI0=
Subject key identifier: D2:A1:BB:FA:8B:99:31:96:EE:E1:1C:AE:17:EF:EA:F6:65:F8:C9:55
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C68CC727B06F1390AAD62100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a53117af-329b-3eb4-affa-849a2f16e5fb.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:8c:c7:27:b0:6f:13:90:aa:d6:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=e1bf9ed2-1fe7-4b85-999a-7c885fa02984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f1:d8:90:31:93:b2:9b:f8:88:00:0d:13:6c:
55:d8:81:27:63:e9:c7:82:f9:4e:cd:a1:6b:32:69:
22:97:3b:fc:44:72:e9:ff:c6:7e:df:ab:22:3e:b4:
bb:d3:db:d6:d9:eb:17:b3:8b:e5:ed:2e:ad:24:28:
8a:13:77:cf:15:24:fc:1c:04:4b:36:ac:ff:0b:0b:
e6:a5:a1:8f:7a:b5:4a:b3:ec:45:89:ec:2d:a9:7d:
e0:a1:1e:b2:f0:62:3c:39:ed:73:f3:c9:dc:1d:5b:
05:44:ad:a5:2a:ed:11:e4:c0:53:94:2b:97:17:c1:
e7:db:6c:e7:13:c4:e5:a0:75:55:83:b6:29:f8:f5:
a5:13:e5:d2:48:91:14:cf:58:e7:07:4e:84:9f:78:
77:78:e4:1b:6f:cd:69:20:cf:32:85:79:d2:b0:b5:
c8:db:ff:78:49:06:00:9c:e2:98:c9:5a:f3:9d:1d:
cc:9a:29:aa:52:15:09:1c:fb:ab:e2:b4:72:b9:17:
22:d4:42:aa:9d:cd:1c:76:fb:dc:c3:d8:95:a6:36:
96:da:3b:97:b1:8e:d2:c1:a0:dc:af:2b:7a:82:21:
c4:e5:bb:37:80:b6:f8:c1:eb:01:20:8e:13:f6:41:
26:e6:9f:6b:80:73:a2:df:12:3e:76:cd:9c:92:06:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A1:BB:FA:8B:99:31:96:EE:E1:1C:AE:17:EF:EA:F6:65:F8:C9:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a53117af-329b-3eb4-affa-849a2f16e5fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:f2:6b:2d:c0:19:61:a6:cb:7b:a7:93:e9:ee:23:9d:b1:8d:
77:5d:6d:62:d0:82:40:08:94:96:63:f0:36:73:66:4e:55:17:
db:7a:20:4b:43:d0:74:55:73:f2:8f:2d:c4:f8:bc:df:e8:f1:
9e:25:c5:87:9c:fb:69:0e:97:4f:5a:f6:e5:f4:17:f3:cc:0c:
d6:3c:88:87:41:bc:c1:57:2c:a2:b9:d9:d3:e1:5b:36:19:c1:
2b:a4:12:f0:f9:0b:51:a9:dc:ef:7d:48:ca:34:47:a9:bc:a9:
4c:8b:42:c2:5e:33:23:74:f9:5c:a5:61:6f:cb:e6:3d:d0:03:
21:b1:14:5b:12:d1:ad:4e:01:a4:f7:8d:13:5d:eb:25:14:d9:
78:4b:6f:84:e7:2b:be:50:9f:cf:67:27:ae:ee:51:eb:49:9a:
dc:4a:c9:37:c9:f0:e2:39:cd:3b:d2:2a:a5:e8:6a:bc:8d:5f:
c2:92:7f:75:60:36:a0:55:f9:91:12:a9:6c:cb:78:a6:79:90:
38:b2:86:15:1b:61:ce:c0:11:eb:ba:37:3b:df:ed:80:89:39:
d9:20:af:5e:43:9f:44:f4:66:48:e9:62:15:e2:80:2e:f6:4d:
b5:58:8a:65:a9:16:62:f3:d8:65:50:80:b7:e9:e4:c3:f8:d9:
c9:a2:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:04 2025 by rpki-client