Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8d195fa-4826-34e3-a35b-b0b9959d7c05.roa
File: d8d195fa-4826-34e3-a35b-b0b9959d7c05.roa (raw, json)
Hash identifier: +OJIEl8GGXf+1mKlUMmuATnyOSxhk/Fv40xFXYSuzRM=
Subject key identifier: 6D:CE:11:2A:C5:DE:69:A2:D3:E5:B9:21:EF:16:E3:F6:4C:9D:87:B7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840620C1C29F01BE4B776982600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8d195fa-4826-34e3-a35b-b0b9959d7c05.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:62:0c:1c:29:f0:1b:e4:b7:76:98:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=19e337c2-be13-478e-a8c4-ff4862d3ef0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:92:5f:16:8e:a9:ac:52:e7:15:ac:e1:07:a2:
35:8c:17:f2:51:25:fa:12:d5:b6:02:5c:dc:0d:09:
1f:24:d3:36:7b:e8:2f:28:70:61:56:4b:3c:49:b5:
9f:f1:82:24:17:72:50:7c:b7:1c:30:f9:3e:06:3e:
16:26:75:64:ef:3a:78:e6:a2:74:ef:a8:6a:b9:b2:
18:28:33:5f:3a:3d:db:15:ae:a5:3d:d3:08:9a:b8:
a7:b8:34:0f:b5:c8:8c:6f:a8:40:ea:8f:43:3a:ad:
0a:c9:f3:11:a8:c1:33:1a:d2:cb:39:68:8d:18:22:
27:1e:15:9d:97:9b:c7:cb:d1:2a:ad:6e:1d:ab:fd:
10:dd:f9:ef:e6:96:74:aa:1b:a5:04:0d:3f:70:18:
6c:51:1d:05:1a:e1:52:82:8a:6a:d5:75:f1:2d:1d:
eb:53:a8:cb:81:66:a7:db:c9:33:b4:1c:b5:a4:d4:
08:94:b0:35:b6:6f:d0:5d:32:4f:3d:70:75:26:bf:
9b:e5:8d:42:d4:92:44:35:9d:41:78:61:90:6c:8d:
40:c5:cc:f8:da:fa:45:ed:bf:4d:ef:d6:27:5a:aa:
f3:1c:e0:cf:bb:d7:18:4c:84:d1:60:3a:5b:e1:72:
77:e3:ef:7c:60:aa:11:51:69:c5:47:9d:87:85:83:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CE:11:2A:C5:DE:69:A2:D3:E5:B9:21:EF:16:E3:F6:4C:9D:87:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8d195fa-4826-34e3-a35b-b0b9959d7c05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:ed:0d:21:22:23:93:d8:9c:98:25:e8:fe:0e:f7:9b:d0:0c:
24:9f:c9:7c:2f:6f:c3:46:25:75:65:80:31:73:46:0d:97:78:
79:bc:f0:01:cc:3c:35:f4:46:95:1f:b9:44:f1:a6:6f:41:92:
50:17:d0:1e:26:fa:1f:bd:36:95:34:4b:c7:02:87:cd:d7:4b:
93:e5:8d:be:e9:41:32:30:4b:7e:9c:e9:b4:3e:9d:e5:7b:c4:
36:63:e6:0c:37:e3:34:45:6e:cb:c9:cf:29:0d:bf:88:7c:35:
98:ee:19:af:42:dc:c8:80:a5:a4:71:1b:04:fa:ee:87:44:8f:
0f:9d:38:10:73:e9:db:3c:98:f9:73:fe:4b:4f:cc:dd:9c:20:
5a:8f:4b:dd:03:32:2d:ec:5c:4c:f2:56:ba:eb:6a:30:4c:8e:
a8:6c:cc:a3:26:14:20:d4:8d:e8:ee:86:5f:a6:e5:34:06:6c:
6f:60:2f:14:47:84:fb:0c:44:4f:fc:ae:42:7c:b1:4f:9c:f5:
d2:f5:2d:4c:ce:a8:f4:f4:9e:c8:ff:70:d3:cb:6b:b1:9f:68:
05:ef:19:30:d1:f4:16:76:17:83:90:aa:4d:2d:0c:a9:57:d4:
93:31:75:66:0c:08:bd:0e:b5:c5:89:12:53:42:4b:d5:b3:b5:
1c:e8:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:44 2025 by rpki-client