Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af520dce-db0d-326d-9bc2-c168a0ed0149.roa
File: af520dce-db0d-326d-9bc2-c168a0ed0149.roa (raw, json)
Hash identifier: hd28pgSUEqr8lIugWOIgFRQFr1h5MDsbvKk3aSW8viw=
Subject key identifier: 21:90:E0:E4:51:47:C9:D3:55:22:A2:49:5A:A4:DE:E6:56:74:27:9F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B3C7169A36A73967BF99120
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af520dce-db0d-326d-9bc2-c168a0ed0149.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.241.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:3c:71:69:a3:6a:73:96:7b:f9:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=fefb2fbd-60c1-46a3-9bd0-522bb86f82da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:eb:a3:4e:60:36:34:e5:85:28:c0:5c:3d:
23:54:13:e2:e8:8e:46:1d:30:eb:6e:89:4a:5b:0a:
74:a7:66:a8:00:72:53:08:4f:df:92:5c:de:87:63:
91:77:d0:37:a8:e6:a7:99:71:56:5f:b8:22:fd:82:
64:41:b4:bd:ae:04:98:a5:c4:6b:41:bd:a3:e8:df:
e4:e0:f7:06:37:61:6f:4a:b7:31:d4:e0:46:2d:42:
8b:be:9d:f7:b6:0c:f2:c3:70:8a:98:ab:44:7b:4d:
a6:f1:f5:0b:e1:e3:d5:47:6d:83:3b:8c:c5:de:50:
a8:b0:76:4f:35:eb:1d:ec:2f:66:09:79:4e:d9:1f:
5a:06:30:77:29:77:1b:6b:1b:3c:70:d1:92:ae:91:
f9:ca:07:63:ae:31:27:38:93:35:67:c3:0a:75:84:
f5:08:94:4d:0b:ae:40:79:fc:e1:61:ee:18:e6:f8:
c9:09:4e:84:bb:eb:92:3b:32:22:be:ad:9d:19:25:
a1:ad:6a:bd:6a:21:e6:7a:77:35:c9:43:05:53:e6:
5c:7c:53:09:b3:1a:4a:30:a2:b7:fb:52:0e:8e:80:
0d:ab:7c:74:33:44:ca:68:f4:20:c1:c3:02:d2:40:
90:7d:d1:71:12:67:e7:33:e5:ee:76:9f:80:f1:98:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:90:E0:E4:51:47:C9:D3:55:22:A2:49:5A:A4:DE:E6:56:74:27:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af520dce-db0d-326d-9bc2-c168a0ed0149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.241.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:d7:74:4f:e5:3a:78:21:fd:8b:83:8f:1f:30:18:e3:8b:7e:
ec:3e:23:2d:4e:f5:46:e6:74:81:60:04:de:81:4c:0e:7e:73:
0d:bc:cc:05:63:41:88:49:57:b2:98:a9:c9:47:55:21:87:43:
29:93:ff:c1:16:61:ce:df:e1:84:60:12:fb:16:e0:42:db:9c:
d0:09:31:7d:f2:a9:8e:b7:d4:c7:48:72:8f:91:6e:aa:c9:cb:
cc:b5:45:1e:33:18:b9:cc:3e:a0:d0:41:41:73:3d:2e:91:44:
8d:ac:d6:8a:50:0d:14:08:8d:be:08:1b:11:14:43:4b:2c:5b:
61:b8:87:74:c1:aa:a6:5f:93:7b:07:ad:71:2f:09:80:09:38:
d0:96:f8:51:96:64:b6:f1:69:a5:48:e3:59:6f:0d:e0:15:55:
78:61:05:c5:3a:8b:11:04:8f:53:64:29:24:97:18:52:a8:b0:
6d:d1:78:a2:91:c4:f5:fc:17:8c:38:d8:46:be:1d:a9:7d:d2:
ff:c2:57:d5:50:a1:e3:5b:0f:22:a1:59:17:88:a6:86:98:52:
a4:3b:99:6d:25:a0:8c:f7:ee:10:ae:32:b1:45:18:47:63:23:
af:c6:32:89:c9:10:2c:1d:24:91:a6:57:f5:8e:67:b7:e4:ba:
14:f0:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:26 2025 by rpki-client