Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7ee849d-ca0e-3384-89f8-04dd160c1830.roa
File: a7ee849d-ca0e-3384-89f8-04dd160c1830.roa (raw, json)
Hash identifier: YxjOrZEIYB94F4kilxm7meBd+mD/Qa7nvgUCu441MSY=
Subject key identifier: 35:AC:1F:3A:C8:D4:CC:02:3A:67:0E:1A:21:9E:24:F8:A1:37:FE:3D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840271246B472F234ABAA046380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7ee849d-ca0e-3384-89f8-04dd160c1830.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:12:46:b4:72:f2:34:ab:aa:04:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=dc9d8548-a469-4c6f-af62-372d188d78a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:78:94:0b:62:96:12:b3:46:1c:e5:81:f5:
92:31:86:ac:b3:d0:f2:a2:27:67:b0:a8:ad:25:ca:
93:da:b8:a3:6f:50:c0:77:a6:37:8d:fa:67:9e:fd:
e8:48:0c:13:91:ff:6f:a8:79:9b:fb:6d:fb:88:30:
4d:86:c1:2d:b0:79:d0:49:f0:5d:d5:3a:8d:f7:10:
e5:45:51:32:77:14:0f:8a:4e:51:5d:07:31:29:75:
55:85:a2:25:d1:c1:01:4e:9c:bd:d0:14:b4:0a:76:
80:ad:d0:7e:dc:24:bb:d5:b1:83:1c:52:34:6f:c1:
a9:d4:f0:71:96:cf:3d:81:bc:26:7b:63:20:13:56:
31:47:e3:2e:22:9f:81:c9:05:14:3b:25:3d:54:bb:
ab:4e:42:a0:f3:07:7e:4d:3f:81:d9:0e:8a:e2:a3:
bd:72:fa:f2:5f:5c:7f:51:f6:3a:ed:ab:94:77:f2:
df:b8:5b:1b:76:d5:d6:1b:18:64:69:2b:6d:42:cb:
e0:ce:c9:0c:6b:aa:ea:c9:ea:78:da:23:8d:85:54:
ea:e7:62:a1:3d:8a:82:89:fb:c3:01:9f:52:4c:e9:
36:a1:ac:aa:4c:4a:c7:0f:f2:9d:43:89:7e:08:6e:
fa:34:06:ea:12:38:62:31:d1:9e:ef:61:5e:e3:e0:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:1F:3A:C8:D4:CC:02:3A:67:0E:1A:21:9E:24:F8:A1:37:FE:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7ee849d-ca0e-3384-89f8-04dd160c1830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:33:7b:d3:f3:a3:b4:f8:b7:21:e7:fb:b8:09:58:91:bf:75:
f3:6f:2d:9b:88:0d:95:84:65:cb:06:4e:bd:1d:ae:cc:41:e0:
92:71:c2:8f:39:a8:b9:30:9c:98:e2:00:13:77:46:5a:04:23:
eb:a9:c0:7b:81:e2:20:e6:0a:b4:cd:4d:4e:c6:13:89:e4:e7:
af:a8:34:4e:d7:43:e5:61:36:a5:f5:81:60:f4:6a:27:5d:fb:
1f:a5:f5:c7:f5:ea:24:0a:30:4d:20:3e:18:f6:e3:ac:c3:72:
3d:f3:f2:ab:fe:77:5f:e1:4a:e9:9f:bd:3b:3d:c3:65:a0:62:
ca:f5:fb:37:3b:62:e2:35:b0:d5:05:48:75:68:a9:80:34:d7:
3c:b6:40:52:8c:71:6b:d5:6a:75:10:27:06:9f:c1:4e:14:15:
67:5c:89:5b:1b:23:bc:0a:b6:aa:68:9d:dd:c9:69:f5:e0:e5:
0b:ea:6e:b2:dd:2d:98:06:8a:ca:ca:53:31:03:f8:23:8b:48:
72:5f:cd:32:3e:e4:4b:23:12:76:cc:6f:2d:17:dd:08:7b:67:
b4:ca:a3:46:df:2d:a3:fb:9b:82:3f:2b:59:28:df:e1:6e:7b:
f6:8c:a4:37:c5:b5:c0:6e:e7:87:a3:ce:ff:fc:38:76:a3:70:
55:dc:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:39 2025 by rpki-client