Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfb0b84d-5d39-30c1-927f-25bc9a5c8fba.roa
File: bfb0b84d-5d39-30c1-927f-25bc9a5c8fba.roa (raw, json)
Hash identifier: 9vS/fWtqPwmyg8WAT3qFf0xt5NmrZHtE6YkD3WfK3k8=
Subject key identifier: 3E:DD:B6:45:EA:46:E8:0F:EF:08:27:AD:F6:B0:E6:DB:9E:1A:2E:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584013E0CC57392DEA32F4D64260
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfb0b84d-5d39-30c1-927f-25bc9a5c8fba.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:e0:cc:57:39:2d:ea:32:f4:d6:42:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=8de243a0-fcbd-4987-bb20-ee783b7e363d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:3a:e2:c1:a9:3c:ff:c2:bd:f3:d8:ba:a9:
04:32:ee:15:85:6c:0e:d4:61:96:64:60:42:05:3b:
2c:41:33:06:57:d0:13:a6:4b:93:c5:b8:35:a9:fc:
60:e0:22:de:81:ae:77:ed:0b:12:6f:35:b8:a0:8b:
94:5a:a3:08:52:8a:0f:80:fb:63:f8:93:d7:15:59:
2c:2f:d8:1e:8c:76:1f:b7:3a:54:a2:dc:dc:36:76:
59:8a:40:d9:c5:1d:32:b4:8b:3e:be:48:d7:16:55:
78:80:bc:84:aa:b7:3e:81:78:2c:6a:a7:e8:27:48:
69:62:54:6b:26:59:2c:6d:fc:ba:99:81:b0:d4:d2:
36:a7:01:d4:ec:e5:15:6e:ce:91:2a:a6:d4:80:09:
3c:99:74:69:ef:84:86:1f:94:d8:a1:47:e8:1f:8b:
55:11:d0:36:54:c2:fb:a0:cb:70:e3:36:c5:02:db:
05:c0:47:a3:f9:ad:07:c2:56:62:95:f3:4b:75:dd:
78:9c:98:f5:97:a8:3a:cb:d6:22:1a:25:53:f8:be:
a0:17:85:bd:b0:f0:b4:ba:9f:ac:d2:7e:a4:6b:d1:
86:fe:36:e7:e1:51:f5:46:9a:01:ed:6c:e0:d0:33:
6d:34:33:14:a5:c3:9f:19:a3:ac:9b:2c:07:00:9f:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DD:B6:45:EA:46:E8:0F:EF:08:27:AD:F6:B0:E6:DB:9E:1A:2E:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfb0b84d-5d39-30c1-927f-25bc9a5c8fba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:a8:49:92:4b:4b:c5:21:8b:b4:2a:a5:b6:1a:e7:d2:87:48:
60:c8:e5:3d:53:c6:ad:e9:91:d1:02:4e:d4:46:7d:b8:6a:44:
aa:bd:d0:0f:a8:18:32:ba:c3:35:68:05:ad:0c:c0:66:b4:85:
ce:d2:b9:06:79:9b:56:de:2a:2d:45:01:2f:4c:9c:f5:72:fb:
e4:c0:eb:59:ff:68:03:c0:96:2e:38:3b:66:19:04:aa:d8:33:
84:cd:37:6f:e7:76:1c:42:a6:25:89:66:eb:b0:70:c0:80:6c:
49:bc:36:31:47:ba:75:3f:11:c9:ae:ce:4f:13:bb:9f:84:2e:
49:1f:fd:35:fe:28:aa:3d:5d:72:60:19:d0:4c:67:89:eb:73:
16:06:0b:bd:87:c1:57:97:73:87:5f:0c:74:3b:ed:eb:a9:09:
7d:21:c9:16:b7:c1:47:d7:cb:49:bc:f8:a8:0e:46:7c:b5:17:
12:37:4e:4c:ed:f7:3f:3c:9a:8a:c7:6e:66:2c:54:8f:ca:11:
43:68:06:d0:ae:24:fa:6e:d4:bb:68:86:24:60:b8:54:b5:34:
f2:23:d5:79:61:50:b9:b0:87:dc:82:18:37:97:49:2c:51:69:
46:f1:3a:46:84:9d:21:8b:dc:16:48:d9:14:65:98:55:72:94:
de:18:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:19 2025 by rpki-client