Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d706f73e-dfc3-3e59-8834-e02ca48ee0f2.roa
File: d706f73e-dfc3-3e59-8834-e02ca48ee0f2.roa (raw, json)
Hash identifier: 25tFtzp0OwVqE0JyqNJICUrlmDsgiLZy2o2ZikqbEZs=
Subject key identifier: 06:DD:47:21:DB:C9:C6:55:C0:9C:C9:C7:0A:BA:02:96:01:D2:3A:73
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584073612D6A5A8A9288D8CC2480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d706f73e-dfc3-3e59-8834-e02ca48ee0f2.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:61:2d:6a:5a:8a:92:88:d8:cc:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=fbfe60e9-4350-4207-9040-f3c6b4674ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:12:bc:cf:38:9d:d5:ac:5c:6a:f5:27:57:1a:
4a:21:1e:d9:73:dc:19:a0:72:7c:f9:af:2c:6e:4b:
1c:09:8b:cd:af:df:26:14:9b:36:c1:1b:56:ce:56:
96:4c:cd:fd:52:32:5c:1b:d5:df:d6:e8:96:5b:56:
f6:e2:d2:58:93:90:25:00:53:11:a8:5e:51:77:95:
6b:cb:2a:12:ed:d5:df:36:c6:21:71:b6:67:12:eb:
51:64:32:23:a0:b8:91:80:fe:b6:4e:29:0d:69:66:
44:4f:de:e7:3c:1a:46:88:f2:70:81:b7:cd:78:37:
ce:2b:6a:42:bf:08:46:55:4a:89:62:c8:3c:40:0e:
56:65:ed:e1:5c:32:86:8b:10:a8:be:9f:4c:2e:c6:
9a:c3:e0:2a:5c:8d:6b:44:be:fa:99:f1:fe:26:4d:
03:02:de:17:b1:07:0d:0a:9e:8e:32:6d:e3:2d:dd:
9d:8f:9d:70:4f:d8:0e:57:07:7c:58:86:ff:40:24:
40:fc:b7:0f:d8:00:0c:45:a2:28:15:29:55:06:5c:
87:4f:00:6b:a6:8e:6d:aa:68:63:8b:6a:fe:6c:39:
92:56:f2:00:bf:e3:31:9a:eb:8c:ae:3a:08:db:96:
04:55:e4:84:cf:12:ca:b3:48:da:a5:1b:fd:6d:6d:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DD:47:21:DB:C9:C6:55:C0:9C:C9:C7:0A:BA:02:96:01:D2:3A:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d706f73e-dfc3-3e59-8834-e02ca48ee0f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.114.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:fb:b5:5b:fd:94:a5:9e:30:e8:5a:0f:23:ec:5c:39:05:21:
da:af:85:27:b4:37:cc:30:20:b4:72:a6:1a:e4:d5:26:dd:51:
e7:ca:69:c7:4d:71:01:4e:2e:1a:dc:f2:99:76:0b:aa:43:05:
d5:f5:50:8e:6a:c9:55:fd:03:07:7d:fd:f3:f2:67:93:fc:4f:
39:d8:4d:75:77:f0:54:12:78:e1:6c:93:88:6b:7e:00:2f:34:
2e:2b:02:08:fc:e2:13:c7:e1:bb:c6:1c:df:e8:67:c2:03:db:
26:9e:6e:a4:0a:8c:2f:46:8a:1b:0a:da:66:30:c5:2e:f9:8d:
4a:a0:4b:ca:0f:c7:9f:ed:67:2e:dd:ff:70:31:07:d8:ac:7c:
09:da:19:59:bc:92:4d:69:62:a9:19:d6:82:6f:e0:2d:4f:4d:
57:ec:78:e5:6d:d7:f6:e9:97:0a:b6:6f:24:56:42:a8:e8:db:
7c:b7:8e:13:99:98:6f:59:ab:91:00:96:fd:0d:d5:e5:1f:04:
50:79:7d:f4:60:4d:74:77:dc:5f:4d:dc:b2:42:64:48:0b:b6:
fa:d3:95:ee:48:5a:ae:22:6a:5d:5e:80:6b:2e:62:5a:0f:9e:
a2:56:9a:ec:8c:ac:53:44:1f:9c:7b:54:05:2f:98:e9:62:7a:
b3:f7:62:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:05:16 2025 by rpki-client