Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9798443-6ae8-3a4d-b79b-32d0e1427758.roa
File: b9798443-6ae8-3a4d-b79b-32d0e1427758.roa (raw, json)
Hash identifier: VPGxT0GEz6T2DeJzqFJquMwcg6qkVwJMihQawj01Et0=
Subject key identifier: E7:83:F0:0E:EC:6F:99:CE:8D:0C:44:AF:8B:EC:B1:35:83:D9:55:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403AD8C2030B5038D27A69E720
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9798443-6ae8-3a4d-b79b-32d0e1427758.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:d8:c2:03:0b:50:38:d2:7a:69:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=3af57d38-ec15-45ef-ba36-3c139543b6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:90:9d:68:8e:7c:2c:a0:25:16:b6:c4:b1:
5d:b6:b4:ad:aa:15:74:4f:0d:2d:a0:a6:10:54:2f:
f4:d1:1b:b6:6c:26:7d:e8:c2:d0:63:79:12:06:52:
fb:c1:ae:25:55:f4:c7:9a:f5:d5:00:bd:f0:06:83:
a9:f2:07:ce:11:a9:be:79:7d:ce:25:ea:88:94:a9:
ad:51:30:8b:5e:da:ac:00:97:c1:d8:c9:89:ea:f1:
0a:09:dd:19:81:08:8a:e0:3a:56:55:7a:ef:ba:89:
1e:b5:85:bc:ed:b0:ed:26:f3:ff:45:7c:f3:76:88:
7a:75:9b:e4:dd:89:2d:5c:5e:53:8d:06:85:13:a3:
63:cd:dd:83:44:82:c7:af:9e:79:23:68:59:30:eb:
54:9d:22:81:79:ed:08:c3:a9:1b:94:a3:0b:1b:df:
af:89:d0:80:1d:ca:47:58:0a:c6:91:6a:28:ed:37:
61:b6:2d:61:36:7f:63:30:dd:0c:31:70:19:7b:a2:
7e:38:e7:8b:99:4e:90:fd:14:22:29:85:d8:68:94:
04:10:0b:88:82:ba:8e:c6:0b:48:4e:f5:90:64:2a:
41:3f:94:f1:9f:71:6d:98:ee:9b:09:a3:9f:84:d8:
f8:92:30:df:a0:89:ba:03:a8:69:75:9a:ed:eb:d4:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:83:F0:0E:EC:6F:99:CE:8D:0C:44:AF:8B:EC:B1:35:83:D9:55:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9798443-6ae8-3a4d-b79b-32d0e1427758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:c9:ee:00:8e:17:ae:0c:8c:40:70:bb:65:25:5c:33:56:b0:
32:a7:78:19:1c:b9:b6:31:fc:01:5f:32:0b:be:32:20:9c:36:
2b:c0:3c:4c:cd:e0:61:91:24:c2:59:72:70:cf:10:86:ed:17:
47:13:7d:bd:b4:2e:c9:21:0a:e0:ff:89:d9:1a:24:2f:ec:ba:
84:8b:29:c7:2b:fa:7c:b1:5e:60:e3:83:6d:44:40:41:a1:92:
01:51:f8:54:2a:72:d2:33:30:7d:a4:99:9e:68:5a:ca:ef:1f:
06:7f:20:d4:20:a7:09:e3:f5:84:0e:33:57:ff:1f:71:c8:f7:
45:90:e3:95:b9:14:5b:80:3e:b9:da:d3:82:18:3e:2f:39:aa:
67:0d:de:7f:46:fe:35:45:ef:f5:73:2c:27:eb:2c:70:30:5e:
f8:6d:a4:56:b7:79:5a:77:11:c3:6b:1a:0f:ba:cf:97:6f:7b:
88:ba:ea:1e:9f:fb:8c:a6:1a:4d:aa:e4:38:e6:4a:8f:3b:32:
48:95:f6:82:1f:11:15:23:bf:5e:0d:ec:f7:c4:eb:77:a9:5a:
23:bc:68:af:02:19:0d:9c:33:f5:93:fe:26:9c:02:d3:18:f8:
db:e4:6e:06:9d:cf:9e:bc:cb:fa:20:23:ab:70:9e:32:36:fa:
6f:bd:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:08 2025 by rpki-client