Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cef182b1-c1b6-3169-9527-c386da0b4a00.roa
File: cef182b1-c1b6-3169-9527-c386da0b4a00.roa (raw, json)
Hash identifier: ck1I7WWQZWbs/rsAkY6S3G4N/dGSOOWU9uNJNKd0NgY=
Subject key identifier: EC:E9:53:2C:0C:45:A6:6F:BC:8C:EE:82:6E:ED:D3:ED:0C:A9:A6:07
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402A4C974708A193B895825200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cef182b1-c1b6-3169-9527-c386da0b4a00.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:4c:97:47:08:a1:93:b8:95:82:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=527a8baa-3709-4f2d-a3bc-7460cac4778a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:c8:32:e7:21:72:03:d7:12:84:3d:f0:7f:
aa:64:b8:80:77:2c:77:e1:97:8b:f4:a8:9b:3d:4e:
7d:e5:88:81:04:cc:7e:ab:d2:88:63:da:f0:27:b1:
56:4a:84:0e:e9:c2:26:08:c5:f9:32:43:90:35:06:
9f:d5:bd:6c:b9:0d:7f:02:54:8c:65:10:ee:35:48:
7a:13:0c:e6:34:ed:b9:dc:5c:9d:e4:93:22:62:2c:
a6:d8:75:41:c0:58:b9:3c:f4:8e:44:d2:b2:b4:3c:
d0:4a:be:1d:90:d8:dc:34:62:f3:84:8f:67:57:e2:
5d:65:28:06:4e:68:6d:e7:15:c3:cf:25:5c:06:36:
17:12:79:60:fa:b8:6a:fe:4d:31:bc:e0:fd:f6:21:
56:1d:24:15:a1:6e:40:85:df:c5:a3:1d:92:8f:a9:
0d:95:43:84:88:71:50:40:dd:29:d9:fb:a4:40:98:
c7:3b:ef:37:0d:a5:fe:b2:22:dd:e5:cc:72:b9:cd:
29:d1:6b:1c:b9:74:c8:a3:cd:49:4e:84:30:55:fb:
d1:be:6d:df:20:cc:62:1f:8a:cf:fc:61:5f:ae:5f:
2b:0d:a9:df:bd:ae:1d:f3:03:97:ac:24:6a:b2:b9:
a4:4e:97:c2:9d:d9:51:5e:e0:6a:6b:9f:1a:e6:09:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:53:2C:0C:45:A6:6F:BC:8C:EE:82:6E:ED:D3:ED:0C:A9:A6:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cef182b1-c1b6-3169-9527-c386da0b4a00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:9c:14:ad:4e:75:62:26:be:0a:c4:5a:b4:92:6b:84:3c:4e:
9d:9c:38:e0:37:4c:0a:df:00:58:64:2f:be:90:a7:df:f8:ee:
91:29:65:68:01:3b:5a:c4:4f:86:c3:ce:46:15:0a:b4:1e:66:
62:84:de:f8:dc:93:08:1a:43:59:40:f7:54:0a:90:02:ae:83:
30:61:30:93:95:c2:12:d1:f7:43:e0:a2:e5:f3:90:5c:32:37:
3f:0c:92:51:2a:04:4d:9e:1c:b6:cb:1e:0c:a5:5d:2b:5f:d4:
7b:4c:c9:cd:5f:6c:46:30:e1:78:ed:ee:e3:50:a6:1f:fe:06:
be:7c:03:f3:ae:8a:45:24:ed:ad:88:63:7b:53:69:7d:e8:de:
dd:df:0b:6a:22:c1:50:d4:8e:ca:f0:95:d5:0c:ae:7e:4f:12:
73:dd:31:a3:fa:3a:05:92:ab:cf:5c:b6:dd:5e:61:02:e6:d9:
cc:89:5e:a6:12:6c:63:e2:b9:0d:18:7e:93:b2:c1:2b:ed:26:
27:18:9b:63:1a:b0:70:46:26:46:62:ec:78:7d:d4:b6:64:d4:
6a:c4:c8:57:c7:fe:2d:2b:d8:0e:db:53:07:4e:ce:9f:d5:ae:
8d:7e:f1:2f:4c:31:af:a7:21:75:ce:77:91:49:18:59:b9:1a:
35:ee:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:29 2025 by rpki-client