Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b74aec45-6e41-36bc-aa31-30601752dec8.roa
File: b74aec45-6e41-36bc-aa31-30601752dec8.roa (raw, json)
Hash identifier: 0SKBYLGH+YZ40ow4MWXHeAU7fxjRxMYUVX1KLerL9Ww=
Subject key identifier: EC:93:A6:A9:04:18:DD:98:6B:05:AC:87:C2:E5:98:89:12:0F:45:29
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D6EBDFE84A8E5DCEC4D79A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b74aec45-6e41-36bc-aa31-30601752dec8.roa
Signing time: Tue 07 Feb 2023 12:00:00 +0000
ROA not before: Tue 07 Feb 2023 12:00:00 +0000
ROA not after: Wed 15 Mar 2023 04:00:00 +0000
asID: 14618
IP address blocks: 56.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d6:eb:df:e8:4a:8e:5d:ce:c4:d7:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 7 12:00:00 2023 GMT
Not After : Mar 15 04:00:00 2023 GMT
Subject: CN=a0957c86-fd7a-48d5-a6cd-76a36eb5f190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:56:9e:ad:5b:c9:22:d6:34:2d:c1:38:27:
49:bd:9d:b9:fa:77:31:12:e4:f1:b8:88:09:9a:c4:
0c:29:79:fd:f6:52:05:e4:91:e7:2e:02:c5:df:60:
14:ac:bf:96:1d:c8:77:60:d0:e1:6c:22:4b:23:36:
9e:79:66:bf:76:19:ab:6e:15:3d:db:8e:7e:11:8a:
9c:b0:eb:35:48:1d:52:ae:9b:f1:b8:5f:81:26:04:
66:1d:b7:12:85:d6:55:f5:bd:41:31:12:56:77:2e:
d0:60:7c:fd:52:71:f7:08:73:95:2d:67:c4:7a:6b:
c0:13:0a:af:ba:a2:83:33:cf:d0:f0:b8:5d:19:2c:
58:43:95:d9:71:82:3d:9d:90:2d:2b:c9:a6:d2:42:
83:08:5c:80:00:46:42:f4:a6:40:a3:67:bc:2c:a8:
d5:a7:c9:c5:1b:25:3f:61:46:2c:a4:98:95:7e:f2:
a6:f2:66:3d:74:14:fa:2f:d9:af:1d:2f:5a:da:c7:
61:80:13:5c:af:dc:6a:2f:71:29:95:ff:91:33:54:
d0:24:f5:7d:6d:d4:4f:48:de:b9:e1:bd:9f:a8:97:
e8:aa:f3:6f:22:ec:6a:72:9b:35:cc:a9:50:18:7c:
e7:8d:19:25:1a:15:4b:3f:d1:9c:f6:d9:7b:32:b1:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:93:A6:A9:04:18:DD:98:6B:05:AC:87:C2:E5:98:89:12:0F:45:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b74aec45-6e41-36bc-aa31-30601752dec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.234.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:fc:45:73:1c:82:6e:ff:f3:55:b5:a0:b6:4a:af:cb:5b:2c:
35:58:01:62:bb:54:08:72:e0:04:70:aa:c7:cf:99:c6:e9:d1:
78:c0:95:50:74:0d:7a:8a:30:1b:3a:e3:19:a4:ab:0b:f0:3f:
5a:05:4d:8a:08:3e:cb:93:34:01:7f:ea:0d:c7:19:8c:2c:b7:
e7:ef:96:59:71:9c:04:66:92:c9:ff:60:f3:83:52:d2:02:bf:
d6:e9:92:15:05:29:e6:a5:d9:4e:5a:65:51:cb:55:aa:bd:3a:
27:bc:32:99:77:c5:83:7f:ca:31:fc:fd:c1:43:22:b8:84:6a:
58:79:12:5d:27:0f:3b:36:a4:10:d3:a5:01:74:10:a0:1c:da:
85:b4:d8:17:41:cd:0d:67:ea:01:0d:b7:9a:fa:3b:74:06:bc:
72:47:0f:08:bd:74:c0:ef:e9:75:46:2d:22:be:4d:34:5e:37:
46:4c:89:b6:10:42:bd:5b:6b:0d:b4:bc:16:ed:fb:1c:56:3a:
b6:f5:18:91:a4:c1:e5:42:9e:28:97:49:ba:2d:54:80:fb:a5:
6a:a9:a6:25:bc:b1:3e:d0:e1:7e:cf:74:17:0d:6f:dd:93:e5:
aa:fe:94:d4:16:8a:90:9f:a2:01:e8:dc:7c:67:3f:a3:d1:da:
a9:18:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:10 2025 by rpki-client