Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d85d07d2-5d38-32ad-ac0b-a32124b5e3f3.roa
File: d85d07d2-5d38-32ad-ac0b-a32124b5e3f3.roa (raw, json)
Hash identifier: oBgM44Wg8OCLafG1daJ4/VS5mW01Diquf1KFv311k3k=
Subject key identifier: B6:1E:35:2C:3E:12:9F:8D:CB:DA:1C:A3:E8:84:29:8B:FE:EC:69:24
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C15F8AD2BA2884774560A8C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d85d07d2-5d38-32ad-ac0b-a32124b5e3f3.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.219.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:5f:8a:d2:ba:28:84:77:45:60:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=d756d5c2-4f6c-4749-a149-4bfc708ec8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:a0:05:b0:97:44:7c:8f:94:59:1c:3f:3e:
f0:06:d2:bd:08:6a:d3:62:79:85:1c:94:a6:d7:14:
93:da:23:73:7c:10:72:79:fe:58:d0:33:f8:15:82:
d8:f8:42:fa:33:13:fc:2e:5c:3b:ef:32:47:fc:50:
17:ca:c9:ab:cc:88:34:0a:47:07:23:f9:5d:94:46:
78:67:39:46:63:d0:f5:d5:d5:f1:11:bb:a6:cb:20:
ca:a8:4f:bd:20:68:14:09:5c:78:ba:e6:2c:87:b4:
92:1d:98:29:72:b4:cd:39:39:34:da:61:12:03:db:
2b:0b:50:34:28:ea:a8:f3:77:cd:37:e9:9c:74:cf:
9e:cc:ab:4f:7d:8f:49:e9:a8:5c:0f:46:9e:22:1c:
3c:ea:c9:77:21:39:b8:fb:b0:47:fa:a0:39:f9:8d:
76:41:55:71:33:db:ac:48:92:e8:2e:87:d7:e4:95:
3e:80:5b:27:1c:ab:37:24:3a:c1:4d:a1:09:68:d6:
2a:77:fd:1d:f2:e1:19:28:97:7e:c6:7e:1c:3e:a2:
bf:7d:ba:5a:2b:27:9e:56:34:67:74:41:6e:96:21:
60:75:1f:17:27:22:23:27:7e:78:89:95:24:9f:01:
9c:4b:e1:fb:0c:2c:3f:d5:b0:41:9a:dc:88:f0:7d:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:35:2C:3E:12:9F:8D:CB:DA:1C:A3:E8:84:29:8B:FE:EC:69:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d85d07d2-5d38-32ad-ac0b-a32124b5e3f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.219.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:61:d0:e9:2e:bd:ac:ee:a8:29:64:c3:97:37:c3:2c:af:06:
d4:a2:06:c7:ba:50:85:5c:04:d8:39:4b:48:46:65:12:73:19:
7b:5e:23:79:7b:dc:6e:71:fe:2b:91:a7:0f:4f:33:0f:25:44:
c9:c7:bf:5c:6f:59:61:83:c1:88:67:7d:1e:ce:0c:60:0f:d5:
a4:4f:8c:3d:26:d9:83:79:10:bd:23:68:b6:39:aa:83:1d:81:
11:ce:b0:f0:ca:ab:59:df:4c:be:29:6b:a9:fb:cf:20:a1:90:
49:7a:55:d0:e1:3a:a0:4a:24:00:4f:dd:26:2e:94:41:06:63:
43:16:dd:76:d9:97:b2:26:22:a6:8a:7e:1a:a1:f3:a6:ab:59:
a1:76:4b:c2:65:70:39:f2:af:84:b0:ef:da:d6:d8:ab:0a:d5:
19:e9:99:8a:47:6c:c6:b2:73:1c:a1:f9:f4:fa:33:d5:06:df:
fd:66:a3:d5:8f:8e:48:a3:1e:7e:c1:70:11:43:6a:24:63:45:
8e:7b:df:68:d1:e8:73:c3:4a:23:1f:9c:04:a6:7b:b2:96:18:
f2:38:4b:cf:55:6b:91:d4:98:6a:19:ec:c3:1d:40:44:bd:ce:
33:9f:a1:18:52:74:cc:7c:e8:19:f6:63:f2:5f:3f:49:ee:cb:
d5:94:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:36 2025 by rpki-client