Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b628f7d4-7a1f-3e15-af8d-a810298aa4e4.roa
File: b628f7d4-7a1f-3e15-af8d-a810298aa4e4.roa (raw, json)
Hash identifier: 2pbFZbr8gpAQztM+/1xSVOe+fa7RefcyV35vQmk7QIA=
Subject key identifier: F2:F5:E4:81:9C:DF:0C:85:62:2D:22:64:7A:A1:0E:87:58:01:21:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C38E045CC25AE3930CF85A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b628f7d4-7a1f-3e15-af8d-a810298aa4e4.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:8e:04:5c:c2:5a:e3:93:0c:f8:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=d2ed4bc6-3584-4552-a9de-4aa762b1cf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:9e:47:1a:6d:1a:5b:5e:54:ba:8f:99:3c:
05:9e:dc:0c:93:d9:6f:0f:88:66:7c:d7:e0:ab:79:
06:5d:44:61:d8:fc:0e:70:38:9d:ac:d6:bc:51:ee:
b9:f7:2b:2a:4c:11:2b:aa:52:97:f9:9c:92:8b:33:
56:ad:c3:73:9e:ce:46:da:5a:fe:72:60:ef:30:35:
8f:d9:ad:43:1c:42:52:75:e3:17:c3:5d:b7:ce:d4:
6d:6e:c9:5f:07:dc:04:a2:7d:df:79:f7:62:6c:d8:
41:e4:70:66:0a:94:67:16:1d:ad:6d:50:c1:de:1a:
8c:aa:72:c2:29:70:a0:79:a2:9a:39:14:53:b0:56:
e7:10:d8:3b:0b:b0:21:b8:42:ce:fa:16:bf:f2:22:
60:66:90:90:58:d1:35:05:65:2b:b8:48:7a:a8:2e:
7c:15:10:e4:d5:52:6e:94:1a:03:41:03:5b:37:8d:
5d:42:6d:55:e9:8f:a1:48:9d:22:14:dc:ae:5f:83:
a3:d9:f1:8b:f3:5e:d5:a3:dd:c8:bb:60:ce:b2:41:
85:d3:d5:5c:c8:6d:29:cf:ff:ed:ee:40:c4:cd:8f:
1d:26:01:b2:0b:75:2a:48:ef:93:f3:e8:26:be:68:
50:e9:38:68:d3:f7:1e:69:fa:4d:51:a9:54:48:05:
b5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F5:E4:81:9C:DF:0C:85:62:2D:22:64:7A:A1:0E:87:58:01:21:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b628f7d4-7a1f-3e15-af8d-a810298aa4e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:7a:91:72:89:2e:b4:89:5a:eb:00:eb:67:77:03:ed:57:6f:
66:92:cd:80:34:14:c0:0f:4f:e7:35:b1:91:cb:2b:df:d2:a4:
77:0d:6f:37:9e:95:1b:72:91:fe:3b:fb:70:53:d7:ef:c3:4f:
5e:ec:84:ce:68:8d:90:4b:93:68:84:20:11:d4:45:0b:0a:c1:
0f:67:86:80:e8:de:e0:40:31:c1:fd:97:4c:5b:aa:2e:7b:48:
9a:19:2c:e1:5d:00:28:a1:66:51:8b:d0:44:05:b9:72:db:55:
25:17:68:e8:44:d9:81:b8:8e:a7:3d:79:8f:b4:db:56:d4:b8:
19:8e:6a:de:85:5a:77:bc:46:ca:ab:28:71:13:c2:4b:00:fd:
e4:3c:3c:53:ec:2b:93:ea:f3:6c:47:a9:e5:a0:21:ea:43:22:
75:b8:7d:bd:f1:76:af:22:27:2b:9d:4c:bd:bf:63:d6:f0:d5:
13:c9:fe:f7:b2:8f:be:2c:b7:b9:0f:54:34:80:f4:de:fc:76:
7c:31:d3:6a:93:2b:40:a4:a8:78:a5:7b:3b:8d:a1:1d:2c:4a:
84:8d:8e:d1:16:92:e3:40:15:ac:4e:a4:e1:35:c7:24:bf:d8:
af:2a:2c:bf:f4:31:f4:52:d2:a5:38:a4:ef:19:eb:df:3f:9f:
51:af:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:01:52 2025 by rpki-client