Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1e9e83e-f75d-3cc9-b932-13a2971183d0.roa
File: e1e9e83e-f75d-3cc9-b932-13a2971183d0.roa (raw, json)
Hash identifier: LIHU3nkDpK7IamcBF+/MOA7vS/yeqdweNs7mw7Gmbww=
Subject key identifier: E6:C9:95:58:F5:49:A7:F7:57:24:F1:71:E2:D0:83:EE:C0:DE:D9:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019CF870DB5DE53F797DA6F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1e9e83e-f75d-3cc9-b932-13a2971183d0.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 104.255.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:cf:87:0d:b5:de:53:f7:97:da:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=06986841-1397-454a-870c-9586b07dae8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:91:f9:25:4b:75:80:16:a0:51:98:02:62:
17:80:07:7f:26:b6:31:2b:2d:49:92:49:9c:35:a6:
de:ec:34:2b:da:dd:9f:13:f3:4c:46:30:f6:cd:f5:
64:c2:c8:93:f9:5b:aa:66:21:c8:d2:72:1c:ea:98:
c1:f6:ea:67:a4:ff:72:f6:cd:a6:6d:bb:5c:00:1f:
1a:62:72:c4:b4:78:9f:99:b7:4d:57:18:83:6c:5a:
aa:26:3d:9c:e0:94:2e:9a:66:b2:73:37:45:82:05:
21:b8:4e:4b:89:48:b8:43:8a:23:0a:af:cb:c8:86:
c8:f2:b9:b1:39:aa:af:39:48:d1:1d:6f:73:c9:a4:
8f:1f:80:f9:ec:fc:08:f9:79:80:09:8f:e3:6c:e9:
8c:6d:f8:e3:4f:41:3f:7b:67:36:d8:31:99:9e:39:
69:09:30:96:c7:41:69:10:da:ab:47:04:83:81:6f:
8e:f9:e6:36:22:37:43:89:c3:09:40:2d:ff:cf:86:
e4:da:0a:12:b3:20:9b:b8:18:29:f1:20:19:7e:f2:
38:34:72:e3:c8:95:d9:de:ea:54:b3:57:af:05:34:
21:e9:8b:38:23:01:55:ff:2b:28:4b:32:fa:8c:a8:
ea:e7:25:e3:2c:96:b4:07:d0:db:c2:72:6e:33:77:
58:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:95:58:F5:49:A7:F7:57:24:F1:71:E2:D0:83:EE:C0:DE:D9:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e1e9e83e-f75d-3cc9-b932-13a2971183d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.255.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:2b:f1:e7:3d:3e:fc:80:cc:f5:9a:bd:8f:64:be:7d:58:97:
2b:ed:b9:ca:ab:83:f4:28:ae:93:f0:dd:16:6f:f1:82:5b:f5:
b6:b5:c7:b0:a1:7a:d4:3e:1a:55:0a:6d:75:81:11:57:1b:65:
65:69:fe:81:36:a0:65:90:8b:3c:56:e5:13:19:ea:e2:47:97:
f3:23:c5:0f:fe:16:ad:ee:f3:24:d3:07:aa:02:ca:37:4d:75:
df:f7:3b:4e:85:c4:a8:64:36:04:d7:57:0b:f0:bc:4a:8f:7c:
a9:a4:13:58:1a:96:b4:69:17:12:f3:b6:8c:ab:54:03:a2:29:
4a:83:a3:07:ae:45:bb:aa:0a:85:89:ba:29:82:38:ff:f6:85:
ea:78:7c:14:36:4f:31:64:c0:90:54:cc:44:0c:64:bd:14:be:
19:7c:ba:dd:84:cb:cc:fe:b1:f3:c9:44:e9:83:9d:3b:85:7e:
d7:ce:e5:50:f2:5a:01:c6:fc:b0:63:e6:ab:8c:79:ad:49:2d:
d6:9f:a2:7c:be:09:71:12:a3:ae:bb:ff:63:3c:84:6d:5c:da:
53:27:10:e7:09:cb:6f:30:47:eb:69:e2:7c:05:f0:cf:69:00:
c8:aa:e9:30:df:4b:2f:ec:d8:7b:f2:73:80:47:33:a4:77:1f:
bc:2d:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:51 2025 by rpki-client