Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2b2b453-07d1-3737-9015-0ea856be7e4a.roa
File: b2b2b453-07d1-3737-9015-0ea856be7e4a.roa (raw, json)
Hash identifier: 6xGqVSyBjycz5kDXN9wOIiYAEzwZOQi8faTMADEXHhI=
Subject key identifier: 2A:25:39:42:78:9A:54:AE:B0:EB:27:07:EC:BB:E7:C9:00:4B:B9:16
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409FFD08278C20E9C496170580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2b2b453-07d1-3737-9015-0ea856be7e4a.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9f:fd:08:27:8c:20:e9:c4:96:17:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=8113e1d3-f804-461f-b2e8-e9ca5a74d12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:71:48:78:f4:70:15:f0:94:aa:4d:e3:40:
42:97:98:9c:cd:d5:a8:0b:68:ea:45:db:ae:e3:c8:
d0:e7:71:a5:81:3e:37:f8:4f:c3:5c:89:43:79:fd:
d3:7c:3d:f4:4e:5f:6d:77:c8:d1:81:26:a4:e1:43:
37:d2:50:1b:93:07:b4:9f:eb:f4:5e:31:c5:b8:f8:
d8:ec:58:93:df:26:b0:68:f6:01:5e:e3:bc:ae:f2:
25:e1:39:dc:54:8f:1c:23:7f:53:b2:5c:92:5a:b7:
b4:8d:e6:18:42:bf:42:b3:f2:c1:c4:6b:20:34:bc:
15:23:2a:16:b3:99:a0:1d:a0:76:2b:54:bd:35:bc:
aa:3d:f5:da:f1:38:37:e4:4b:66:b9:e4:c1:4c:e5:
5b:39:bb:07:a5:92:68:02:67:c1:45:91:af:42:11:
83:24:07:af:e2:fb:31:11:e6:3e:78:41:41:3e:10:
2e:c7:57:66:35:e0:29:86:fd:7d:15:4c:bc:47:d6:
53:f6:1d:06:25:17:f0:01:8a:9c:57:99:f7:42:a4:
c2:2e:8d:da:4c:6b:8b:86:fe:36:b1:30:b4:7d:be:
6f:ee:1b:49:bf:80:35:96:ec:31:c3:eb:d0:42:61:
56:09:4a:ac:36:3d:69:e3:af:cf:b4:e4:f9:a3:24:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:39:42:78:9A:54:AE:B0:EB:27:07:EC:BB:E7:C9:00:4B:B9:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2b2b453-07d1-3737-9015-0ea856be7e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:8f:70:04:93:8e:4c:6e:f4:37:51:2f:a2:a1:ac:3d:1c:c3:
50:b8:ac:70:65:71:ef:74:84:a5:92:ed:b5:ec:33:17:60:f5:
73:9a:26:cc:a9:c7:4b:7c:4b:db:96:09:83:57:b0:a4:b9:c5:
03:53:18:82:00:da:58:8c:ef:8b:15:da:3e:c3:4b:a7:76:c0:
76:51:10:40:e9:f6:5d:38:88:b7:57:99:71:df:d1:64:60:8d:
b1:c1:22:a3:7c:0f:73:99:dc:2f:d5:8a:9c:f3:ba:b3:54:d7:
e6:83:88:aa:76:ff:ea:87:eb:66:72:ac:85:a6:4d:4b:49:69:
35:14:5c:26:a1:bd:44:ee:c3:73:47:4b:54:50:e0:6a:30:d0:
c9:62:7b:9f:8c:4c:ed:a3:71:7e:0d:80:2a:4b:ac:f3:3a:d7:
e1:ee:60:c1:17:49:10:14:92:ad:0a:e1:aa:03:b2:3d:04:60:
a5:64:78:6f:8c:9b:b4:78:0c:ec:96:2a:72:58:11:bf:cf:6b:
5f:6c:76:cd:7a:08:1b:b2:6c:88:b0:5a:d2:e1:85:0a:44:06:
28:4f:c7:f1:67:f1:26:18:1b:a5:0a:e5:3b:5a:af:a8:ed:14:
95:2a:eb:f9:5f:fb:41:38:26:e9:7d:b4:ba:de:54:0d:09:d7:
49:c6:d0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:34 2025 by rpki-client