Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b856f737-4ec6-3136-ba91-060ff4afed2e.roa
File: b856f737-4ec6-3136-ba91-060ff4afed2e.roa (raw, json)
Hash identifier: MgAuP5eavBGcsuc8aHtR2+SpgQ1hTLpv2EM3e+VB0iM=
Subject key identifier: 04:86:1B:96:44:7B:0C:1B:88:31:D3:EA:8E:B7:6A:2F:69:00:1E:44
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584042F5D642C9B1A6B642BC3400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b856f737-4ec6-3136-ba91-060ff4afed2e.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 156.4.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:42:f5:d6:42:c9:b1:a6:b6:42:bc:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=3c684dc9-a98d-4096-9ddf-a5f8b438dff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:1b:3a:04:5a:95:9e:a4:da:57:5f:d4:ec:
e7:50:78:e5:62:1a:b5:4a:09:fa:03:10:76:92:a5:
15:1d:de:45:6f:45:4e:99:d0:eb:0e:b5:68:a3:8c:
b7:b9:b2:1d:5e:0a:2c:fb:05:92:11:e9:69:e3:c4:
aa:bb:57:9c:4e:2a:f0:37:80:6e:28:87:b2:37:a3:
2e:f1:58:06:e5:9e:a3:98:74:30:03:c3:d1:65:d6:
2b:0c:c0:ce:6f:b4:79:bc:6e:60:94:fd:ad:e4:6f:
4f:f4:e5:3a:da:49:07:4c:0f:cb:be:01:66:18:6f:
f4:bc:2f:3b:5e:3b:e0:e7:ea:1c:a5:7c:5f:5d:57:
00:eb:63:8a:48:08:d6:a2:7d:48:82:0c:d9:26:f9:
6a:ff:ea:a0:e3:6d:d7:ee:5d:91:42:c2:5d:2b:bf:
65:7e:c8:51:1c:ea:1c:5d:1c:ca:f6:63:5b:6f:e1:
5e:8a:98:c4:f9:59:27:24:01:58:da:45:5e:d1:d3:
6f:bc:5b:9f:a6:8d:78:d0:c1:cb:50:19:d4:1f:a2:
12:88:59:da:92:be:71:bc:0f:8d:e5:8d:c1:41:4d:
e9:56:ca:41:a6:d0:f0:68:fe:3a:92:f1:b6:61:20:
1b:16:05:20:4b:b8:3e:7c:68:34:e8:1b:f1:3d:6f:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:86:1B:96:44:7B:0C:1B:88:31:D3:EA:8E:B7:6A:2F:69:00:1E:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b856f737-4ec6-3136-ba91-060ff4afed2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
156.4.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:a8:bf:dc:51:20:22:0a:87:63:b6:1e:03:25:74:6d:6c:0a:
df:4d:d8:99:bc:32:f2:3d:9f:d3:26:7b:ea:ec:7b:6b:ba:fc:
53:33:4e:47:d5:43:a5:af:35:b8:8c:30:e0:9a:79:12:df:d9:
0c:7a:fb:5d:11:de:bc:a9:58:d0:81:07:6f:3a:b1:9b:b8:b6:
83:50:79:f2:f2:30:6c:81:63:f2:5d:7d:bb:f3:3e:e1:18:c3:
d3:a9:dd:68:1e:a0:5d:8a:3a:c3:60:ec:98:03:28:5a:51:4b:
ba:a4:15:82:5a:db:c0:a8:2e:eb:cb:b6:e4:d9:97:c3:db:4a:
a1:2a:80:2c:6e:b6:c9:fc:f6:04:82:7d:64:f0:81:b3:ab:c3:
b7:52:d5:92:05:d3:55:75:32:be:3b:f7:8b:aa:fb:96:62:2d:
07:b2:64:2d:0e:27:cf:5e:30:b9:13:dc:d8:e4:1b:b5:42:8f:
3d:fb:15:3b:f0:42:db:d8:21:e2:d0:a5:f4:c8:ae:06:0b:cd:
39:0e:03:df:4c:7d:f5:30:38:77:42:7e:58:78:b8:8b:60:c8:
fa:fd:15:bc:e6:3c:cb:58:ed:65:29:e8:f8:08:9b:18:bc:3f:
1b:c9:c2:c8:39:c0:bc:73:46:cf:80:1a:1d:50:4f:4f:78:0a:
6f:95:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:35:40 2025 by rpki-client