Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aadecf3a-39fc-3df8-9cfa-a9622b6a4d3c.roa
File: aadecf3a-39fc-3df8-9cfa-a9622b6a4d3c.roa (raw, json)
Hash identifier: RCRJ3Hb2snC35JEzvizR+0zYmRwmPvOaiq22YJpGBV8=
Subject key identifier: B4:82:2D:57:92:7D:1C:2F:B1:A4:E7:5E:97:B1:69:FD:8C:C5:75:F6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B0376B01A1142F0C85BED080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aadecf3a-39fc-3df8-9cfa-a9622b6a4d3c.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:37:6b:01:a1:14:2f:0c:85:be:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=81e56b78-0ea5-4791-a449-c7de62932f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:2c:f1:06:63:40:37:f3:b3:f4:26:40:5a:
2f:a8:e5:49:41:e2:23:fb:d7:f5:93:f9:3e:f0:ca:
b1:2d:ff:7f:d5:5c:3e:5d:9b:52:8f:12:0d:98:b0:
c2:58:f9:d0:ab:1c:c6:87:00:dd:f9:0c:62:65:e5:
79:13:c6:92:24:1d:58:bb:76:c3:6a:24:3a:db:72:
dc:91:18:49:87:5f:50:5f:3f:65:e7:08:5b:12:db:
69:85:9a:4f:42:6b:cf:9d:11:31:2c:9a:32:c9:1f:
e8:c0:fa:b5:a0:a8:22:06:42:22:67:d7:33:d3:10:
01:00:ef:22:37:c0:f8:21:75:78:06:7c:61:0b:d9:
83:1d:17:65:4f:ae:aa:e8:be:ac:f2:20:84:7b:3c:
d7:af:06:04:fc:1f:3d:3e:df:f5:c0:72:e1:c8:9c:
f1:e2:38:6b:d4:c9:3f:79:74:e5:59:5b:cf:c7:a8:
12:c8:6c:0b:a2:f5:58:df:83:9b:c3:d2:ff:b0:3a:
ab:3b:a0:5b:a9:b8:aa:c3:2c:21:d4:64:20:70:67:
59:e4:e7:21:4d:34:cc:7e:2c:6e:57:26:42:a8:34:
9e:39:eb:fd:80:28:33:27:42:10:45:a4:e1:df:44:
5e:4b:15:9a:76:5e:b1:10:4b:f5:7e:74:fd:f4:ae:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:82:2D:57:92:7D:1C:2F:B1:A4:E7:5E:97:B1:69:FD:8C:C5:75:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aadecf3a-39fc-3df8-9cfa-a9622b6a4d3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:31:0c:90:1c:31:41:fb:22:21:14:03:06:bc:9f:ca:14:38:
47:df:5c:5f:e2:77:b3:d3:65:7e:29:72:80:db:45:20:b5:da:
93:48:3f:01:5a:e1:58:e6:3d:4d:fc:a6:d5:be:bb:02:aa:83:
e6:44:8b:22:e8:d6:a3:d4:b0:b1:4a:cd:37:00:68:6a:99:32:
03:c9:87:bc:c3:a3:15:c7:bd:42:1c:2e:e8:b5:ec:ea:e7:40:
cb:de:9b:fc:80:9f:a5:f8:01:59:b7:4d:e0:15:92:b9:37:ad:
0e:e7:9a:53:63:74:b0:2c:13:36:a4:4d:3f:81:a0:fd:25:9c:
e7:60:98:55:32:47:da:68:42:79:df:a1:a7:57:9d:b8:d3:70:
dc:f3:7d:69:cc:52:19:fd:21:e4:3f:27:00:25:c5:a3:25:1f:
1a:58:0d:84:35:7a:90:62:b6:02:5c:b3:49:98:fa:21:a2:03:
b3:41:fd:1d:50:5a:c2:6e:83:af:6f:2f:91:0c:14:c7:96:42:
e7:60:49:b1:f1:6a:59:0d:bc:a1:89:73:10:98:07:5e:56:ab:
d9:44:72:b1:19:08:df:37:d0:2e:51:26:bb:f3:e0:f8:21:7b:
f0:6b:da:b6:b7:86:7b:99:39:5a:ec:38:c9:74:b4:bc:d5:4b:
49:5d:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:13 2025 by rpki-client