Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dca28e8e-d065-3d4e-b744-ad94be3a55be.roa
File: dca28e8e-d065-3d4e-b744-ad94be3a55be.roa (raw, json)
Hash identifier: U6WOyhiHHjhQJ7Vl0PF9ADPD3ZLvVLCtq+vhIDtOUNQ=
Subject key identifier: 93:42:01:53:AB:D5:B6:78:5D:F4:D0:09:0C:94:59:59:A9:04:23:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C3D87568CBFB5F5A400CE7C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dca28e8e-d065-3d4e-b744-ad94be3a55be.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.98.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:d8:75:68:cb:fb:5f:5a:40:0c:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=5bbe39a7-7697-486e-8b4b-48dee0a25752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:b4:ff:72:f0:14:d3:5f:77:17:be:38:97:
33:77:8a:b1:00:cd:45:6d:b8:fe:3b:57:6f:99:0d:
32:a2:8c:2a:17:da:c6:96:e0:7d:28:85:6c:bd:99:
3d:d2:d8:f9:68:bf:67:85:d5:11:a8:36:6e:ec:91:
f7:bf:87:df:d8:78:fa:45:d7:a0:86:23:67:3b:f5:
6e:36:dc:0e:b9:f6:63:66:d8:48:85:2e:8c:a8:69:
1a:33:82:62:5a:9a:25:bc:48:dc:2c:64:e2:c8:1b:
24:03:ae:72:ec:cf:c0:ee:3e:2f:b5:93:d0:3e:d4:
bf:5e:a2:7d:95:fb:f9:55:e2:74:0c:a6:97:f1:32:
81:90:f8:36:59:5d:79:55:ab:67:94:04:51:be:d2:
0d:91:99:7e:34:ad:e4:ea:b9:4a:8a:fb:3a:0e:1e:
aa:98:3f:d3:48:5c:ee:d8:e1:c5:a3:9c:4e:63:5f:
fd:c4:af:84:af:0f:fe:5e:30:02:98:07:60:68:43:
20:4f:02:4a:a2:05:be:a4:89:01:c7:c9:b2:f2:1f:
bc:ef:6e:1a:5c:97:46:ea:b3:c5:85:4e:b7:ba:7d:
0b:6c:fc:5a:dc:8b:c5:38:62:e6:16:12:2a:46:70:
8b:48:7b:ac:ab:23:27:d2:32:66:1e:32:e4:3c:a4:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:42:01:53:AB:D5:B6:78:5D:F4:D0:09:0C:94:59:59:A9:04:23:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dca28e8e-d065-3d4e-b744-ad94be3a55be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.98.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:8b:f6:4d:fa:60:ca:86:23:15:3d:51:5c:ed:d2:e3:7b:57:
c3:aa:c7:ba:cf:31:17:8d:89:0d:c6:25:9a:f2:c0:d8:52:c3:
51:e9:12:56:e3:05:6e:b5:72:40:a5:69:ed:09:96:b1:7d:22:
53:a9:1e:91:1f:6e:59:ce:fb:4f:66:10:62:b2:bf:26:e0:ea:
2c:f5:0c:63:00:b7:7a:a2:f6:f4:2c:aa:db:77:33:e1:86:4a:
29:1e:7b:1e:11:37:aa:f0:93:b7:52:c4:1d:15:02:bd:e8:12:
7a:96:6c:c8:aa:39:cf:44:e0:73:49:c3:14:c2:b5:5b:4c:cd:
28:b6:c3:69:14:c0:8c:d3:b0:b4:31:65:84:52:d4:9e:f0:6e:
44:62:9a:8d:6d:de:bf:4c:c8:7e:b9:d3:82:5e:23:5c:b2:d9:
6f:1c:4a:db:ca:aa:88:ac:eb:36:37:ba:23:9a:cb:8c:f4:d4:
ad:15:f4:30:33:e9:dc:d0:b0:ee:38:f2:62:c8:fa:cf:98:ce:
cc:45:07:2f:a0:c6:fb:60:4e:29:cf:78:d0:ba:f2:b7:11:3a:
9f:d1:9c:7e:e8:50:9d:b0:b5:c5:6f:1b:04:57:d3:74:69:83:
ee:1a:37:f0:0f:26:3f:58:91:d6:33:21:e5:13:2b:d0:2b:4d:
60:ce:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:48 2025 by rpki-client