Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c587c9a0-c1e5-341b-afa5-6f9d5d0fcaf7.roa
File: c587c9a0-c1e5-341b-afa5-6f9d5d0fcaf7.roa (raw, json)
Hash identifier: OtvSU5ig3h16jUi4RGcmanJarKQwsTT9rBWvLpjHSqo=
Subject key identifier: 34:DA:60:C5:59:0F:75:AF:10:9F:1B:41:CF:77:A6:6F:FE:D5:51:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C6B20484624B38D08DA1D040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c587c9a0-c1e5-341b-afa5-6f9d5d0fcaf7.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.199.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:b2:04:84:62:4b:38:d0:8d:a1:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=358f30e1-8ab9-44f4-b247-599b146c85ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:0d:3b:20:86:68:b3:99:0c:04:8f:52:0b:
39:32:2f:97:b2:b8:5d:b0:12:69:64:43:67:08:90:
23:44:c7:12:7c:b1:ab:29:94:b6:51:58:5a:7a:22:
da:42:e2:d5:3a:a9:92:1d:85:ad:47:6d:57:a3:08:
93:8e:3c:63:d4:32:42:a0:40:a6:1e:30:4e:81:40:
35:7e:16:b2:e6:08:be:3b:46:f0:75:a2:51:a5:7f:
a8:75:ff:f2:bd:d3:73:ef:26:78:4c:a7:28:48:29:
5d:9f:8f:3d:b5:ba:cc:59:ac:68:d4:1b:6c:fc:5d:
27:eb:1b:bf:75:93:5c:4c:80:da:c2:be:99:ac:ff:
87:05:12:e5:e9:7f:86:a3:64:a0:42:ba:1e:a2:d3:
91:c4:02:f1:b1:6f:fc:04:d5:a8:54:1f:ac:44:04:
bb:4d:96:d2:e0:6f:0f:15:21:1f:3d:f1:47:4a:a2:
7e:39:dd:0e:3d:f0:27:02:92:05:7a:99:4b:53:be:
43:b2:4a:4e:71:1b:28:0d:4a:8d:3f:b5:65:71:da:
d0:38:e4:15:f4:79:75:e0:c7:df:c2:67:5f:02:e3:
2e:00:5f:5f:c1:65:06:04:75:26:56:a1:15:bf:75:
ad:19:09:c6:10:8d:0f:f7:36:23:99:14:69:c5:d8:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:60:C5:59:0F:75:AF:10:9F:1B:41:CF:77:A6:6F:FE:D5:51:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c587c9a0-c1e5-341b-afa5-6f9d5d0fcaf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.199.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:7e:29:fe:d6:ff:0e:f7:48:e6:2c:7c:ef:73:00:d0:fb:12:
4c:1c:30:f2:55:fa:a4:0b:5e:2b:72:cb:f2:8a:1c:ba:16:ef:
d5:70:4f:63:78:7a:d1:39:23:11:76:7e:fa:94:59:02:7f:71:
78:59:ac:f4:af:7a:49:2d:23:90:7a:c0:76:c4:de:a0:92:0d:
54:1f:67:ed:19:71:e7:81:f6:7c:6e:e8:df:5b:e4:f3:4c:ce:
5b:65:0f:80:2c:25:77:9d:d1:9a:98:1f:a5:2d:a8:bd:5b:5d:
e8:8b:cf:89:4a:86:b6:f1:78:e4:ee:f6:10:01:f4:7c:1c:73:
f5:5a:e3:e0:bf:f6:82:83:1f:24:1f:ee:14:d3:75:4c:fe:20:
2d:35:c3:d4:58:ca:8b:66:5b:57:62:d1:1e:5b:e4:f4:9a:0d:
f7:ca:4b:c7:7c:68:b7:d9:7e:38:de:a1:15:33:aa:e6:0d:16:
91:0f:a9:cf:5d:fa:2b:9b:e0:cc:e7:e5:58:c1:ae:33:f0:a5:
5b:51:1c:17:90:95:fb:25:5e:35:68:22:24:26:5a:2c:67:de:
5c:b9:a2:fc:4b:6c:84:b7:1c:c9:60:d5:3e:3e:d7:65:fc:f9:
2a:12:0c:cd:6a:e5:07:e5:ee:d8:97:8c:b1:f3:e2:20:53:21:
78:99:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:13 2025 by rpki-client