Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d163556b-f838-3898-a3c2-4711048fd448.roa
File: d163556b-f838-3898-a3c2-4711048fd448.roa (raw, json)
Hash identifier: NtOTiMZmFgTVXxrZRvKXLr+iLFkgCPZbWiBby12xDvc=
Subject key identifier: E5:C3:F9:88:68:FD:F3:F2:45:1F:50:F2:6B:9D:B4:28:80:71:94:C7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584078EEE26A76F92AF70DF59480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d163556b-f838-3898-a3c2-4711048fd448.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:ee:e2:6a:76:f9:2a:f7:0d:f5:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=590b3449-44cf-44b0-9d9d-2a5e59531acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:18:91:a5:98:89:80:d5:3f:0f:e4:17:aa:
3b:f1:ee:17:19:d6:0d:9f:8f:9e:1c:2f:e2:1d:07:
a8:82:cb:3b:97:09:5a:b2:10:6c:36:aa:1d:df:4e:
ab:95:88:02:9f:d4:05:72:f8:37:ae:8e:f0:09:89:
fe:85:a3:5c:74:57:6f:83:d5:25:ee:a0:e7:61:a5:
d3:02:14:42:2e:11:80:1e:32:dd:a5:9c:7d:65:11:
6c:3a:f1:e3:a2:28:59:25:2d:29:ba:71:d1:71:46:
03:21:56:8d:c1:4f:c6:3d:13:8c:10:3b:58:1d:79:
31:63:6b:a5:3a:47:61:95:f6:b6:6b:cf:c8:4e:51:
10:c5:5b:25:b3:d8:2f:2f:2f:c9:ca:a3:0e:4d:9f:
78:24:86:33:3b:0b:90:55:49:60:6b:3f:df:25:71:
fc:1b:5c:e6:49:c9:fa:00:f8:94:7a:36:03:0e:be:
b8:b7:5a:34:ee:89:ba:b7:e2:84:bb:f6:4e:c3:e1:
59:f9:aa:87:89:92:c6:4e:2a:20:f4:6b:24:6d:d0:
74:16:43:c1:03:c3:bd:b5:d1:d9:1e:91:05:6d:17:
95:83:2c:e9:ea:e6:b8:47:1f:2c:9c:9c:1c:d2:47:
e8:59:34:35:e0:a8:56:01:1b:34:e1:f4:15:f8:e3:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C3:F9:88:68:FD:F3:F2:45:1F:50:F2:6B:9D:B4:28:80:71:94:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d163556b-f838-3898-a3c2-4711048fd448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:fc:01:38:f0:a6:28:e2:27:22:21:25:b8:81:b0:48:93:05:
fc:53:ab:d1:a6:b1:e7:d0:20:5a:02:e0:f9:bf:7a:8c:d0:b7:
a4:b9:a7:0a:c2:ed:de:67:0c:5c:4b:eb:ca:5e:c0:6f:28:ab:
52:09:ab:fd:c0:00:b4:85:1a:c8:b4:2e:ba:86:56:23:d7:67:
f3:f3:02:54:93:3c:46:af:59:4e:e3:a9:f3:07:a3:ff:26:c0:
08:4a:d5:27:dc:00:f3:b2:91:0f:c1:18:e4:b2:43:19:1e:1f:
05:48:49:56:71:e1:e5:cf:6d:aa:ac:2f:df:e5:05:28:71:b2:
3f:80:81:5d:03:22:51:b2:f8:78:84:67:75:76:6a:ac:39:5e:
b8:69:e9:53:d3:eb:30:9b:70:d9:d1:80:48:e4:3b:38:d7:6a:
b1:72:80:7f:b7:0c:9a:52:3e:67:50:2c:6c:25:92:cb:dd:e9:
94:2a:d1:2d:33:4c:43:29:bc:de:14:1d:de:c1:cd:68:3e:68:
e4:98:cf:bd:18:75:42:80:8e:10:b8:bf:b3:d3:d6:da:b2:74:
2b:f8:db:03:dd:4c:66:4e:42:61:70:16:b6:39:36:dd:bf:90:
76:4c:46:8d:dd:b3:05:50:d0:a5:a7:d2:37:b2:a9:02:d7:36:
b4:d4:e2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:36 2025 by rpki-client