Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfbb9b88-cd0e-383e-b3ee-53642e787dd6.roa
File: cfbb9b88-cd0e-383e-b3ee-53642e787dd6.roa (raw, json)
Hash identifier: oKCpKVF5TixBiAtU8Z6oMNziBTmTkapxbqrcxrxR2+M=
Subject key identifier: AD:FB:FA:3A:36:FC:C3:94:E5:10:DC:D8:EE:B7:65:E4:15:68:DE:DD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDB85423001324F62B3ACF400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfbb9b88-cd0e-383e-b3ee-53642e787dd6.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:db:85:42:30:01:32:4f:62:b3:ac:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=8629413c-f8ac-417b-a077-95ea7a583852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:de:05:a4:b3:df:12:ce:bd:30:45:ed:8a:
58:f6:96:cc:3c:fb:2b:b7:5c:65:db:a2:67:9b:86:
f4:a5:d1:da:f0:e8:d1:76:b4:38:bd:1b:8b:09:4b:
a6:88:26:e4:9e:02:83:7e:59:f0:a6:de:59:9c:39:
ea:b8:b9:62:2a:c6:bd:09:ac:3b:65:f3:ce:20:03:
f3:f7:25:6f:3d:c8:f5:ca:77:80:2e:88:aa:07:b6:
fe:12:f5:ea:e3:16:ac:45:b5:fc:88:5b:1a:57:c9:
7d:81:df:99:cb:41:48:21:7e:a9:3e:26:58:4b:8f:
cf:49:21:05:fa:49:d8:fe:25:de:e0:89:df:e9:11:
0c:e2:53:7e:c8:f1:5a:4a:11:93:0a:59:cd:53:82:
2a:63:e0:0d:d3:23:4c:b1:09:fc:ba:c6:fd:a6:3a:
65:0f:b1:9f:c2:98:20:19:6e:38:63:37:33:74:0f:
cd:18:9f:ef:4d:3b:62:ce:98:cc:8f:60:d5:8c:c2:
e3:e0:79:df:50:9d:02:39:0f:7b:92:77:33:e8:92:
7d:ce:39:9e:8d:76:ac:70:84:0e:9e:d3:e2:78:14:
c5:d0:a5:f3:18:1c:c5:24:b5:df:61:7d:5d:ac:d3:
2e:f0:34:fa:57:c2:ee:68:db:35:e5:ce:8d:40:8e:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FB:FA:3A:36:FC:C3:94:E5:10:DC:D8:EE:B7:65:E4:15:68:DE:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cfbb9b88-cd0e-383e-b3ee-53642e787dd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.126.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:1e:d6:8c:94:86:6a:a0:62:57:59:6d:81:cb:41:95:49:1c:
be:84:37:a1:ba:94:98:3e:45:44:2c:f9:8a:5e:60:f9:c0:20:
0b:ad:0c:59:6c:83:bd:32:ca:1f:2f:8b:da:ce:ae:94:d6:a0:
6f:55:e1:ed:e8:e8:84:ba:e8:df:bb:89:fc:33:da:17:ea:9c:
00:21:ab:27:08:06:45:87:2b:9d:87:39:eb:d3:f9:eb:78:bf:
ab:58:01:75:02:39:e5:38:09:df:99:0e:fe:62:f9:34:22:0a:
f0:19:19:f3:a5:73:05:f2:1f:f4:a8:37:e1:60:a5:b4:04:0e:
23:4a:6c:00:88:7c:44:f8:9b:93:9a:95:b8:60:e3:fe:cc:ef:
73:be:b4:8f:3c:b1:86:2a:f9:03:0d:03:a8:f4:d7:f6:66:6c:
4a:87:d5:09:db:da:f3:aa:39:58:87:e9:9c:32:12:01:98:f1:
16:56:a0:21:b8:6b:ca:4b:9d:91:41:19:8a:81:42:20:dd:df:
1d:2a:47:64:bb:b7:3b:18:35:06:93:3a:e1:07:27:1d:58:41:
07:6e:58:c0:b0:10:03:b7:51:89:13:ff:56:59:17:73:a6:87:
92:4e:26:64:5c:dc:4c:f1:83:67:73:2b:0d:d3:ee:e7:64:66:
81:24:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:28 2025 by rpki-client