Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d91d444b-6123-3569-9a36-735486afaf9f.roa
File: d91d444b-6123-3569-9a36-735486afaf9f.roa (raw, json)
Hash identifier: XXbJp9Xtsn7+dXxYlGrtO/EEVxa/R+4m3zyAIl6RfAI=
Subject key identifier: AC:7A:D4:4C:D2:ED:E0:AE:3A:87:49:37:9C:58:47:17:D5:D6:9A:A2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8E4FD09A784C5DDD070D7A70
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d91d444b-6123-3569-9a36-735486afaf9f.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 56.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8e:4f:d0:9a:78:4c:5d:dd:07:0d:7a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=e7ca0510-1f33-45ee-a172-9dd354a99342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:fe:c9:76:55:5f:b3:b2:f7:bd:f6:25:c1:
02:76:a4:62:fd:81:a0:7f:7c:46:ec:b8:ab:a6:c4:
75:0f:e1:d5:ad:00:d2:c5:56:87:e9:15:66:6f:29:
e2:70:12:8a:8c:b9:b5:2a:b8:37:94:53:53:b0:be:
cc:0e:ca:2b:49:88:23:6b:84:7e:db:cd:dd:af:53:
3e:78:72:63:07:8f:9d:8a:0c:2e:48:6a:32:b3:16:
85:d6:ac:f6:1d:ba:07:f2:1b:b0:cc:0d:47:66:69:
45:9e:0f:b2:6e:b9:55:6a:3e:97:c6:0a:19:36:f0:
97:05:df:bd:d5:22:3e:aa:58:2b:95:1c:4d:ea:28:
3a:0b:60:c0:6c:8e:1b:e4:9d:4c:c5:d4:bd:16:dc:
08:ce:5d:6a:d3:46:1e:60:e0:03:57:71:98:83:98:
6e:13:64:56:7b:7a:ed:f2:8a:2a:d7:c2:51:5d:10:
72:b7:c7:3f:a2:30:f7:53:ce:c6:37:bf:5f:f6:f1:
d6:90:97:98:63:fb:43:e3:35:36:b2:c7:64:fb:b7:
c8:c6:b3:5a:f0:58:1e:0d:d2:82:60:66:7c:f3:f4:
f1:8f:54:02:ab:e7:35:f8:d3:7f:70:8d:98:20:25:
26:58:b5:58:f5:14:57:f7:fe:d7:ca:7b:6a:80:23:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:D4:4C:D2:ED:E0:AE:3A:87:49:37:9C:58:47:17:D5:D6:9A:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d91d444b-6123-3569-9a36-735486afaf9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:af:59:0c:fc:9e:ea:f0:ca:7e:04:1d:e6:22:32:15:3d:c0:
c8:27:64:c8:e5:f5:53:40:d1:36:ff:9e:9c:df:b0:2e:c1:88:
99:85:e5:ba:7c:c4:1f:12:ce:bb:27:c1:f9:10:d6:6e:df:a9:
a0:f3:0d:71:81:d4:17:76:04:7b:4e:2e:1e:6f:7e:71:3c:65:
ce:d3:e7:58:d5:e8:17:68:80:61:7b:f7:11:3b:e9:de:f8:d6:
1c:0a:a5:b7:88:12:e6:b1:4c:0e:7a:66:d9:54:b7:a2:ae:32:
20:48:00:c4:d6:b2:21:64:f6:59:f2:a2:cd:f6:fe:d7:fb:39:
b9:19:14:b7:a3:fc:28:94:26:3e:6c:ff:a3:b2:6c:e6:ff:25:
91:20:cf:50:01:64:bf:21:d5:d9:1a:f6:eb:39:15:8c:03:7b:
01:cf:3b:9f:fd:85:f6:9a:40:79:4d:e5:32:37:11:cf:23:b5:
3d:4d:0d:57:77:41:19:8b:dc:53:f2:6f:97:78:6a:c2:b9:00:
d1:cb:cb:49:6b:8a:2e:b3:be:4e:e7:8e:51:c9:08:a9:62:0c:
a3:eb:24:69:c3:55:1a:2f:95:ba:59:15:92:2c:23:7d:36:c6:
e3:36:85:56:15:fd:85:af:6b:f6:de:0d:a3:c4:83:0f:fd:eb:
60:e0:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:19 2025 by rpki-client