Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c104f215-cfb8-3645-aab7-edc61f82554a.roa
File: c104f215-cfb8-3645-aab7-edc61f82554a.roa (raw, json)
Hash identifier: LDcQ9lpVGtjX1tnLhc36VrLsQDs16AxJiHhLP8T4WlE=
Subject key identifier: 6D:0F:00:85:A1:36:D5:B5:45:16:26:47:E1:24:35:40:6C:6B:0A:3E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401DF0A8A9D94F0AA016E74D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c104f215-cfb8-3645-aab7-edc61f82554a.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 158.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:f0:a8:a9:d9:4f:0a:a0:16:e7:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=5f481fb8-6ed6-44ce-8614-4705e958c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:6d:f9:25:2c:db:20:43:ab:b2:9a:c1:36:
f6:71:b8:bf:12:87:33:76:1d:f2:82:36:e9:36:7e:
32:f7:21:ab:2b:51:12:ac:ca:e2:4c:88:ea:16:0f:
b6:a9:52:7c:00:e8:8f:57:38:05:25:aa:9c:98:59:
9b:55:78:fe:e8:27:5f:65:92:9b:86:be:de:58:57:
bd:47:a0:15:79:c7:ae:80:e4:39:14:ab:3b:88:5d:
8b:20:f4:59:4a:7c:70:65:08:5d:48:30:6b:49:34:
ad:08:25:62:7c:f1:58:50:ab:fd:39:eb:64:a6:84:
aa:58:b4:18:fc:cf:a2:fe:82:a2:35:22:68:f8:69:
41:76:54:a1:14:d4:6c:e7:e4:60:8e:56:7e:a3:3f:
5a:88:e5:01:e8:c5:31:f5:53:7a:c8:34:1c:25:aa:
e0:9d:9f:38:6e:d8:ae:81:71:d2:ab:da:e0:03:92:
80:da:a8:33:ca:ed:58:e5:d4:b9:9f:c5:c0:cf:7b:
5e:28:c3:fb:a1:73:28:86:a1:72:4b:e9:cd:d8:fe:
cb:cf:78:4b:d1:08:d8:21:99:bb:3e:3e:66:7a:3d:
a3:f5:0e:5f:7d:95:1e:e0:aa:0b:aa:e1:a3:87:fc:
42:29:d8:1e:40:1a:cd:39:d8:8a:fc:30:3b:67:9b:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0F:00:85:A1:36:D5:B5:45:16:26:47:E1:24:35:40:6C:6B:0A:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c104f215-cfb8-3645-aab7-edc61f82554a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:23:43:f3:18:6c:49:11:12:10:f0:ba:15:c0:a5:fc:ba:52:
9c:29:21:75:cd:39:c7:a1:c2:6d:17:5a:b2:a0:6e:20:cd:cc:
6e:f5:67:de:e3:93:00:2f:43:98:67:5c:a0:2f:e1:a9:f9:30:
c7:47:62:a6:59:9f:95:75:38:3e:17:f7:ab:34:42:51:13:d1:
10:27:fe:44:6e:19:a9:2c:02:64:29:fd:dd:e5:34:00:81:9b:
aa:d5:e3:3d:dd:af:b7:fd:26:ef:95:4a:05:97:2c:b0:ed:b7:
9d:73:94:47:ee:8e:ea:ab:8e:0a:76:0d:3c:8e:07:1b:e0:50:
ad:59:45:5e:ef:42:24:39:1d:06:0d:e2:22:3f:d3:9a:0d:73:
c6:9c:a5:b1:34:bd:1b:fb:88:5e:b7:2e:4f:1a:32:fa:a3:4f:
24:18:83:e5:81:c0:ea:0e:8e:48:bf:25:60:17:22:c0:f0:16:
49:98:8c:20:ed:ae:c2:b8:a2:5c:a4:83:39:54:ae:58:07:08:
09:f7:73:2e:6d:f8:18:3e:fe:ae:be:e9:38:f7:6b:78:fa:81:
93:b0:23:ea:aa:a1:f8:76:66:df:bd:1f:9f:7f:22:d0:84:3c:
ad:30:67:42:8e:9a:0c:b6:72:54:42:7a:cd:da:35:41:2f:d9:
5a:6b:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:41 2025 by rpki-client