Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df1bdeb7-0b4a-356c-b94b-eb886e3e4ee9.roa
File: df1bdeb7-0b4a-356c-b94b-eb886e3e4ee9.roa (raw, json)
Hash identifier: huHcNc4ww93+nFv/QtxDHfMkcL7ksmbz5TYyKfw1iKo=
Subject key identifier: DB:DE:32:DD:57:3A:B3:29:45:63:AB:D2:50:D7:2A:83:83:33:FC:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409ADF02A9027192BD6569EF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df1bdeb7-0b4a-356c-b94b-eb886e3e4ee9.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:df:02:a9:02:71:92:bd:65:69:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=7a524be6-8e3f-4125-bfb2-a57add35f1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:39:5a:5a:83:db:99:02:2d:3d:34:e8:e3:
4a:63:00:a7:8f:44:94:27:cc:db:d1:90:00:db:a3:
5a:df:14:ea:01:c4:e2:0a:28:7d:70:c6:27:e2:e7:
bf:d2:79:14:f3:79:79:c7:c5:a5:bd:fe:a8:c5:3f:
ab:b1:6a:a0:30:d2:f1:e3:45:e1:1d:c5:43:d9:8a:
5a:e5:a6:03:b2:90:d6:05:05:14:fa:c0:36:85:71:
3d:d6:a4:21:6f:8f:0a:ee:81:90:89:33:48:4f:f8:
25:08:3d:71:d0:16:17:68:9a:9f:2b:be:52:4a:a3:
74:5f:29:84:2b:de:be:cd:62:bb:5a:5a:0e:e2:11:
6c:79:87:c9:ba:29:07:03:d5:73:0b:f5:f0:9b:82:
fc:a4:a7:a7:c3:a9:06:1c:05:39:8d:a0:91:6e:a4:
d4:ce:64:a7:d1:d6:34:32:29:1b:f6:bf:f5:46:54:
d0:8b:7f:d9:8f:73:bc:cd:ee:e5:8e:ab:3c:9f:3e:
79:b8:9d:6e:1b:45:4e:d5:90:06:35:9b:12:84:9d:
33:de:07:80:98:a4:ad:7a:3b:56:f3:6a:9f:ad:5d:
99:df:18:ef:30:0f:ae:fa:71:c1:0c:ed:8e:a8:30:
36:d0:7b:65:a2:20:9c:c7:09:05:3a:99:4b:09:d5:
67:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DE:32:DD:57:3A:B3:29:45:63:AB:D2:50:D7:2A:83:83:33:FC:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df1bdeb7-0b4a-356c-b94b-eb886e3e4ee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:1a:e7:05:e1:8c:f1:99:87:12:b6:10:dd:af:f0:20:ec:1e:
93:c6:af:00:a9:ff:75:b0:23:25:7d:d5:d6:35:51:30:6e:76:
b6:a3:55:5c:c6:5f:df:12:a6:20:d6:ba:15:a6:9a:87:3f:85:
d2:63:78:cb:ab:13:4d:db:8d:46:9c:b2:e3:5d:3c:bc:52:42:
2d:05:47:6b:80:d8:d5:33:e1:43:62:c2:94:77:a8:88:94:a6:
4c:99:31:c5:4e:9e:26:c4:e4:78:58:cf:27:4b:f9:90:3a:4b:
ea:95:3a:ee:d5:ae:00:78:5d:fe:33:9b:99:ef:10:d2:be:2f:
21:98:ba:6b:2d:0d:e2:16:72:09:24:0a:4f:a7:41:47:8f:22:
ad:05:0b:d4:b1:38:7a:d3:ce:55:06:86:9a:c1:98:bc:f5:89:
b5:6f:b6:24:af:12:28:1e:ac:bc:0f:59:bb:ca:4f:63:a1:3f:
b0:ba:08:72:f0:09:9e:b3:a1:df:04:e3:3b:0d:56:10:ab:bf:
2c:47:af:a9:e5:56:78:9e:7c:b9:c2:a9:52:6d:f1:f0:55:59:
58:56:38:f8:62:cd:aa:56:3c:04:9f:09:1f:86:20:3d:ce:89:
14:59:54:27:c1:0d:46:08:a3:c3:57:da:bc:01:20:d3:90:37:
94:a5:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:14 2025 by rpki-client