Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc291155-35ba-3015-890b-dae030fac03a.roa
File: bc291155-35ba-3015-890b-dae030fac03a.roa (raw, json)
Hash identifier: lsMjJIxMWswof7uHQledWBqJB6RDhJRMhOoJBLaKm3Y=
Subject key identifier: 0A:8D:42:28:6D:FA:AC:EB:70:89:35:D8:DF:2E:32:91:8B:59:F7:5B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840734357DB6637E15B5005DF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc291155-35ba-3015-890b-dae030fac03a.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.164.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:43:57:db:66:37:e1:5b:50:05:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=7bcc6baf-74bf-4ee6-8006-a6329f91dfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:1f:6c:03:58:a6:98:1f:09:29:74:16:4b:
b1:c8:68:2b:a5:33:c6:88:7b:2a:41:d3:69:9e:a0:
19:7a:f8:2b:46:d0:c1:04:94:91:f8:45:7c:4a:1b:
71:e9:49:ad:26:61:19:d2:94:92:83:5d:91:7b:c5:
3b:d5:f4:b6:e5:0d:eb:46:90:aa:93:d5:9c:85:80:
13:76:a6:c5:0b:db:23:c3:7d:df:2a:bd:bd:96:4f:
fe:fc:8f:71:66:73:cd:54:07:df:77:ac:20:33:47:
f3:52:4c:1a:a0:74:2e:14:fb:da:eb:bf:76:24:07:
36:c5:6d:cd:e0:cf:31:c5:41:00:f9:2a:44:fa:bf:
af:95:c3:46:17:05:ac:1c:ad:95:fb:a4:53:05:40:
93:54:e1:d3:b8:63:e4:88:4c:50:62:49:10:d0:45:
62:6d:b8:45:39:50:3e:bd:3f:e9:62:40:d6:eb:4f:
87:57:73:ce:34:69:27:a3:b4:e9:a6:91:cc:69:4e:
31:a1:2e:5d:95:bf:47:95:e9:99:1a:24:65:13:04:
d4:b6:8f:7a:45:8d:08:14:aa:a6:fc:69:83:5e:cc:
4c:60:8f:a6:2c:46:e9:52:61:ed:2d:bf:0b:26:10:
d9:55:e4:cd:1f:ce:8a:dc:51:25:d4:aa:dd:44:8f:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:42:28:6D:FA:AC:EB:70:89:35:D8:DF:2E:32:91:8B:59:F7:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc291155-35ba-3015-890b-dae030fac03a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.164.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f1:a1:cb:32:9a:e3:3a:c8:b4:cf:67:2e:8e:69:4f:9b:95:
7b:86:d5:d6:6e:31:ff:ac:1a:b5:43:40:1a:64:b7:f8:2e:13:
34:78:a0:eb:02:52:6f:cf:30:c0:dd:2b:b5:35:fc:9a:a9:5b:
1a:dd:47:f8:de:7b:01:49:7e:ac:1d:39:29:53:a0:9c:c2:25:
57:3b:4c:27:ef:52:2f:27:52:09:16:b8:1a:bf:82:38:cb:30:
45:6c:c4:91:f4:d4:d9:08:8e:c2:c0:5a:7a:64:6f:a1:b1:09:
b8:9f:77:eb:68:65:78:b3:8c:8b:bd:9d:83:64:56:cc:db:9e:
f4:a7:27:9e:86:33:fa:ff:31:8e:c8:8f:bf:0b:9f:8a:44:a9:
af:79:6c:a8:76:d0:5f:d5:1f:5d:8b:b8:31:c4:cb:f6:a3:15:
e1:7c:a7:4c:66:1f:74:34:a6:7c:35:9c:16:fb:2a:0b:a2:bf:
b3:cf:f7:18:23:84:11:98:bf:4b:be:45:fc:ce:9e:8e:07:8b:
bd:07:30:5d:d8:51:ce:0a:c9:8b:77:28:ad:0b:97:fa:a8:f0:
64:d4:13:d1:bf:3d:c3:de:ce:13:3e:92:10:4a:0c:c1:5b:a0:
9c:28:c3:a9:29:d3:7a:bd:b5:35:41:3f:16:62:e1:6c:3b:f8:
e0:ce:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:51 2025 by rpki-client