Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6089b5d-70ef-3a65-acbc-e9cc0adeda5d.roa
File: a6089b5d-70ef-3a65-acbc-e9cc0adeda5d.roa (raw, json)
Hash identifier: Vn4P0gKypJbzd5o2c13ASvaGspZJdCl1RklMnaRaWLA=
Subject key identifier: F5:A5:9F:A9:51:C3:12:FD:5B:05:C0:AE:34:9D:57:F1:C6:06:1B:B0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409C8ECBEF3FA2C9C7D28E5180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6089b5d-70ef-3a65-acbc-e9cc0adeda5d.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:8e:cb:ef:3f:a2:c9:c7:d2:8e:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=69291f6e-c39e-490b-bdde-2b4f28019c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:9b:af:23:53:bf:b5:90:dd:72:43:4f:60:
61:31:97:d7:e2:26:e2:7a:62:f6:01:48:c5:93:2c:
44:b9:31:da:d8:29:cd:7b:18:9c:83:7f:71:30:cd:
f6:5c:7a:a2:19:42:a1:c7:fc:2d:e0:a7:8c:4b:25:
b0:ca:17:c8:02:72:90:50:a6:d8:7d:a3:69:95:81:
f3:b9:dd:80:c8:f7:e5:93:ee:f9:b3:df:17:b8:f4:
13:63:8e:b9:b8:ae:91:b9:a0:d9:6b:29:3f:51:51:
08:18:52:60:c9:ef:f7:7e:b8:25:56:d6:1e:05:96:
c8:46:8b:89:69:8d:2a:4b:62:8f:3c:d1:bc:29:58:
82:9c:36:fd:e6:ea:44:a6:f6:29:56:64:2a:0d:b9:
47:b4:6b:fc:45:6f:16:b1:91:d5:53:fd:8f:32:56:
b6:86:d0:9c:dd:c0:ee:ee:69:01:90:a0:21:b3:82:
82:a3:5d:4d:ef:49:ef:76:ad:bd:fa:3d:80:1f:ec:
c4:8e:c5:64:37:c8:5b:a9:cb:ad:42:78:bc:11:34:
ae:53:24:01:27:ad:49:2b:bd:f5:f5:69:4c:15:18:
84:b4:32:43:d4:a8:8e:b0:ab:b3:50:98:29:d8:8b:
a5:0d:f4:e2:0c:2d:26:02:ce:d3:b2:9a:90:69:5c:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A5:9F:A9:51:C3:12:FD:5B:05:C0:AE:34:9D:57:F1:C6:06:1B:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6089b5d-70ef-3a65-acbc-e9cc0adeda5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:63:15:62:bd:88:76:76:d3:5a:86:7f:aa:bd:b8:5d:d9:5d:
e2:84:66:71:4b:05:de:76:92:fc:16:a9:ad:15:6a:73:02:d2:
5d:0e:5d:06:d5:97:6b:d7:b7:0e:71:8d:e0:a1:6f:12:eb:29:
eb:55:5e:d8:ef:9e:70:7b:64:9f:01:39:82:5d:37:eb:d9:86:
44:d4:e2:1a:70:60:1f:fc:d0:a0:d8:a3:3e:9a:a9:2b:4f:51:
5d:fe:2e:c0:ea:d0:2b:5c:b8:aa:d2:4e:0c:dd:b8:79:bc:e1:
d1:be:4e:31:49:f8:41:87:c5:d9:f2:94:ba:24:77:bd:8b:ca:
ed:03:7a:ee:aa:e6:70:9f:1e:35:eb:df:ed:44:61:9c:3a:a3:
a7:96:3b:b0:81:d9:61:6e:1b:80:d1:27:b4:8f:d3:2e:06:f7:
af:52:65:7f:6e:70:9a:43:ac:90:a3:e6:9c:83:16:dc:08:08:
b7:d2:61:16:24:7a:77:fb:0f:ce:be:51:73:e4:20:ae:da:f5:
3c:22:06:98:85:71:9e:cd:28:b8:3b:67:a6:65:64:91:49:f5:
59:ad:ce:1d:fa:db:b4:3e:9d:11:88:1e:e8:fa:61:18:27:cd:
af:38:c4:85:3a:d0:8a:2e:10:e6:55:42:91:80:57:32:84:9b:
95:e7:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:05 2025 by rpki-client