Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b838ccc9-f370-3d23-adc6-5112dcfbc436.roa
File: b838ccc9-f370-3d23-adc6-5112dcfbc436.roa (raw, json)
Hash identifier: ccpC16lXGo/MnCV/mPSrRWFO1NmnJxnE2RcfEzJyM5A=
Subject key identifier: F5:33:BA:79:53:29:D1:5A:74:AD:5F:5F:D3:5F:13:DC:0A:4A:AF:34
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E3DB444B655F87CE7A08B5180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b838ccc9-f370-3d23-adc6-5112dcfbc436.roa
Signing time: Mon 13 Jun 2022 12:00:00 +0000
ROA not before: Mon 13 Jun 2022 12:00:00 +0000
ROA not after: Tue 19 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 56.33.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3d:b4:44:b6:55:f8:7c:e7:a0:8b:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 13 12:00:00 2022 GMT
Not After : Jul 19 04:00:00 2022 GMT
Subject: CN=c16e4202-1973-4b19-9219-04a1b3a465b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:af:50:e4:58:70:81:e2:14:51:b0:c3:18:
b4:c9:bb:35:60:d6:0d:9d:57:7c:9f:e2:43:33:34:
50:5a:70:24:ff:aa:4d:d6:47:88:74:0f:9b:a5:b6:
66:d0:97:65:b8:f7:4f:43:f5:41:3d:8d:5d:73:d4:
58:8a:05:54:46:d0:36:9a:22:6a:89:13:90:5b:75:
4b:9e:0e:3a:a4:05:bb:67:4a:e5:f5:3e:e0:48:1e:
7f:5e:bc:59:37:03:d4:11:ae:f3:c0:4f:b8:47:a4:
f3:12:52:c5:5e:32:d3:4a:c1:a3:38:13:a7:a3:d6:
a1:06:f9:4c:41:bd:ce:e8:41:04:e7:75:df:df:eb:
8a:21:dc:05:3e:a9:62:9f:41:f7:d8:4d:88:9d:76:
77:73:fc:3f:84:1a:81:ec:b1:29:3f:2f:d4:70:1f:
fd:74:11:84:bf:14:de:ad:dd:ed:69:d2:c6:6b:4d:
c3:d2:4a:13:18:60:19:a4:62:b0:3a:0b:01:bd:b5:
40:8e:78:ef:11:32:88:37:8c:41:8f:d7:cf:23:66:
e9:91:ea:0c:c9:ee:b5:a0:47:92:68:ba:77:40:b7:
98:f7:40:71:80:00:f7:f3:64:91:a0:be:bd:49:db:
49:74:78:ad:00:8e:0d:c8:60:39:2f:86:3e:47:9b:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:33:BA:79:53:29:D1:5A:74:AD:5F:5F:D3:5F:13:DC:0A:4A:AF:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b838ccc9-f370-3d23-adc6-5112dcfbc436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.33.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:cd:86:2b:8f:fc:2c:05:28:e6:9c:b7:bc:08:2f:a3:b7:1f:
d6:8a:f0:c3:5b:5e:66:f5:00:27:70:a0:24:7f:a5:e0:98:84:
52:51:d7:18:4e:1c:3b:86:18:99:93:58:ad:ac:72:82:25:63:
25:65:7e:d8:79:e0:ba:7d:fe:aa:8c:7d:34:63:80:1b:33:b0:
3b:81:3a:34:e8:20:ce:a3:ca:ea:e5:a1:89:6e:87:cc:ae:81:
53:5d:fa:aa:15:8c:54:1e:30:59:64:b6:61:b0:51:e7:59:0e:
ac:a3:08:b3:90:d4:fc:2d:33:13:2c:bf:b4:54:0e:76:79:93:
34:2e:0c:52:85:2c:79:40:5a:1f:4d:91:f8:96:e3:29:bf:93:
25:44:1c:22:6b:91:0a:dd:1a:9d:70:5d:b1:f9:4c:63:50:53:
e8:d7:7b:29:f6:19:52:f3:f7:a6:37:c4:44:11:03:fb:6c:fa:
4f:93:a8:ec:3d:34:62:51:8d:7f:b7:ec:02:33:e0:1f:6a:4a:
14:f5:04:b6:ea:9b:a1:aa:6f:ad:a8:8a:96:7c:fd:6e:83:31:
9b:25:79:a5:d9:4a:af:f2:37:d7:34:13:c2:f0:c8:1a:e2:52:
00:d6:d8:09:a6:a7:e5:fc:82:d1:91:34:36:6a:2d:12:bf:eb:
46:e7:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:36 2025 by rpki-client