Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae9c669d-5589-3170-8972-f49de7e85fc1.roa
File: ae9c669d-5589-3170-8972-f49de7e85fc1.roa (raw, json)
Hash identifier: +TPa2cHVb25oAJnNOQMtj0wznAuxKMNTTY6jDj8Bids=
Subject key identifier: 38:62:5A:12:A2:85:6B:3D:99:88:D3:86:11:F9:0E:ED:96:0F:49:05
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408973A72615FE49C20882E780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae9c669d-5589-3170-8972-f49de7e85fc1.roa
Signing time: Tue 10 Jan 2023 12:00:00 +0000
ROA not before: Tue 10 Jan 2023 12:00:00 +0000
ROA not after: Wed 15 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:89:73:a7:26:15:fe:49:c2:08:82:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 10 12:00:00 2023 GMT
Not After : Feb 15 05:00:00 2023 GMT
Subject: CN=fb163707-ce13-4232-9678-8156637be2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:27:6b:f7:ee:75:18:b0:02:15:a1:80:e4:
f1:de:c8:70:fa:20:b2:2a:3a:30:86:0b:95:36:62:
54:37:03:82:51:64:e2:f1:6a:99:e5:86:ba:4b:af:
d2:cd:26:a9:1f:fd:32:10:33:fc:7e:9c:ea:7b:6f:
c2:b9:ff:e4:73:10:88:47:3b:78:b3:91:2d:1d:4d:
f1:7d:b0:e4:99:4c:14:7a:52:ed:f0:0c:f3:2a:0e:
28:f0:c7:ed:9f:76:23:4b:ca:04:25:5d:ea:3b:2d:
75:42:52:b7:57:3d:04:0c:c2:b4:69:70:e8:30:2a:
29:89:fa:b1:c5:41:67:df:0f:58:70:4c:86:78:a8:
47:e5:18:c3:0a:b8:dc:f5:d1:82:87:ed:49:3d:12:
e2:6f:ad:e3:12:55:ac:6c:1c:42:05:74:46:f9:79:
e0:d1:49:71:b8:04:9e:89:ce:62:07:b2:29:df:cc:
10:8a:d9:13:7c:a4:46:6a:a9:a8:c2:ab:43:8f:4b:
73:62:f9:27:48:e3:08:65:3d:29:1c:b0:cd:13:66:
4c:8b:56:6e:60:59:32:36:bf:27:39:d8:c7:25:c0:
fa:80:46:2e:31:37:07:f5:13:8a:dd:52:fa:89:11:
19:f8:ad:fc:de:82:0e:54:4b:e0:e3:42:d0:19:a4:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:5A:12:A2:85:6B:3D:99:88:D3:86:11:F9:0E:ED:96:0F:49:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae9c669d-5589-3170-8972-f49de7e85fc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:42:7a:30:34:bf:2c:b2:d9:67:bf:3d:2b:8b:3d:22:23:e6:
8c:cb:10:9a:1d:fe:52:05:ee:d6:13:9a:1e:d7:86:53:79:58:
9a:08:15:e7:03:d2:5a:ef:41:fc:e5:d1:fd:30:81:3f:12:00:
05:ed:45:21:e2:7e:ee:53:59:00:46:e7:93:69:b5:1e:2d:56:
3c:a1:58:eb:9d:ba:3b:88:10:6b:2d:0b:de:e0:58:de:88:f2:
7a:09:38:3b:e6:1d:67:80:d6:70:63:12:7e:fb:4f:ce:c1:a8:
8f:9a:28:ed:32:79:65:12:80:76:f1:f1:34:a5:a1:e0:be:2e:
7c:ff:c5:07:b0:7b:e1:9c:be:f6:a0:cb:87:09:a9:f6:1b:90:
99:dc:98:9f:fb:ab:60:a6:bb:da:4d:ad:65:9e:d8:32:ba:89:
cf:37:12:48:91:9a:b8:bc:fd:d5:e4:19:03:1f:b1:1f:6f:5d:
31:40:45:70:0f:0b:94:25:e5:c2:f2:75:17:e5:53:60:57:f2:
69:74:68:ca:bf:f5:94:e1:cb:be:50:4d:86:70:a3:33:f9:e9:
37:d6:d5:1a:ff:73:c0:77:f9:55:60:74:26:4b:b5:d9:18:42:
61:12:57:72:b7:bf:1d:80:29:3f:c9:8d:fe:98:72:fa:7f:66:
9f:e4:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:46 2025 by rpki-client