Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7ef4737-44c1-37ac-9899-5543a7399b2c.roa
File: a7ef4737-44c1-37ac-9899-5543a7399b2c.roa (raw, json)
Hash identifier: jKFxx1pPVcOXOuySWlf3IgrGn2GZwH0qzeJLlwO/at0=
Subject key identifier: 2D:D4:40:A2:3A:3C:0C:F4:6E:13:F9:A9:48:88:10:0C:A5:C3:F1:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8D9592B477F857B663F61640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7ef4737-44c1-37ac-9899-5543a7399b2c.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8d:95:92:b4:77:f8:57:b6:63:f6:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=7c8f7d20-f66e-4c2c-a5db-90752bd25751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:a0:38:50:26:23:d4:14:51:7c:26:00:40:
dc:54:46:46:c5:6a:01:59:48:a1:35:34:68:f4:5c:
2d:20:0d:43:02:fd:d8:8e:4a:3b:71:4a:c9:fc:0c:
3b:15:71:fa:1b:d2:86:76:7e:69:29:1b:ba:91:7b:
25:dd:6d:5d:a8:3d:f2:ee:33:09:c1:99:ea:7d:14:
e6:bb:02:5b:64:86:05:d3:e5:20:20:98:e5:47:e0:
24:12:14:a4:bc:d9:8d:78:c2:3f:74:da:16:5b:5f:
e8:1c:e6:fa:e6:b2:f0:b5:0a:bd:83:3e:18:94:96:
49:f5:73:11:bc:59:c2:39:86:98:fc:86:e7:c2:00:
c7:c3:ca:a6:89:ab:d7:95:2f:90:4c:22:51:89:ae:
3f:50:e2:de:94:43:3d:63:53:c9:b0:6e:87:14:29:
2c:84:ea:02:87:aa:44:92:d5:06:67:cb:68:7a:3b:
54:e9:17:e8:d6:6d:6d:50:1a:b6:25:73:c3:2d:92:
ca:bd:84:1c:3c:42:f0:a1:1b:8e:ba:aa:51:70:04:
e4:45:6e:3b:9d:c9:93:3c:56:59:71:3e:d4:f1:70:
0a:b2:b2:da:c7:c0:68:f1:d5:56:ba:cd:56:f0:e1:
78:ee:cc:fa:46:c7:e8:a8:cc:d0:cc:ee:61:13:ca:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:40:A2:3A:3C:0C:F4:6E:13:F9:A9:48:88:10:0C:A5:C3:F1:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7ef4737-44c1-37ac-9899-5543a7399b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:ca:d7:2e:5d:ad:f5:03:2a:3f:6d:67:29:2e:d6:99:65:1c:
4e:ee:13:19:3a:7c:1f:bd:5e:1c:13:31:ad:df:48:08:e1:55:
c7:28:f5:5b:59:65:15:ed:73:f5:99:8a:77:31:2d:e6:65:7c:
12:d4:94:93:44:0d:c9:de:87:5d:81:1f:d4:01:53:3d:79:8d:
53:6e:85:72:55:10:1b:68:e5:68:d5:78:af:7f:a3:ac:36:4c:
1d:87:d3:e1:15:f1:e4:7f:21:3a:87:a0:b0:89:e7:8a:24:6b:
f2:0a:91:3c:f5:7a:0f:04:d5:c1:9e:7f:4e:5d:da:e2:92:95:
2f:36:69:22:f0:80:54:70:fc:2d:98:7d:db:24:71:6e:d2:83:
a2:55:20:fd:f5:5c:21:16:09:46:ab:b5:75:e4:3b:83:7e:2f:
7f:84:c9:8b:b5:dc:b5:23:67:9e:09:de:cf:0b:6a:6b:fe:a3:
79:45:46:cc:59:27:a8:9b:f0:59:a9:fb:4c:33:13:67:d7:cf:
27:09:69:12:3a:c2:91:af:b7:b6:94:84:a0:f7:7e:99:37:a9:
a3:4d:7d:de:e6:ff:6a:40:0d:c1:58:fa:cf:51:73:95:46:6e:
c6:94:41:5a:c2:ae:bc:39:77:b3:49:e9:c4:df:78:d1:1f:b2:
1c:e4:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:54 2025 by rpki-client