Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3bfda70-aaaf-3ccf-a6d8-a1b8faece258.roa
File: e3bfda70-aaaf-3ccf-a6d8-a1b8faece258.roa (raw, json)
Hash identifier: IkoSe0KFWLW3XOo4QL2dOhx8drWy5PShyZX48we1jJQ=
Subject key identifier: 10:46:95:89:63:F3:9E:0A:CA:21:95:D1:59:95:05:97:81:50:B2:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400055F61FC1CE080DC629B380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3bfda70-aaaf-3ccf-a6d8-a1b8faece258.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 56.98.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:00:55:f6:1f:c1:ce:08:0d:c6:29:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=b21239db-5309-4b9b-bd8c-f7a5d9c6ea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:15:19:13:4c:21:1d:1b:fe:ef:af:4b:b4:1d:
d0:7e:c2:d1:d6:8f:29:9e:3e:dd:f9:12:7f:d4:d6:
c0:f9:13:50:61:3d:00:10:18:90:1a:57:fd:19:85:
10:a0:73:93:04:b1:87:6b:7b:09:55:ce:50:c9:02:
dc:63:57:a2:43:1e:32:da:a9:d0:d3:a4:c8:24:f0:
7e:25:16:f7:6d:ca:0b:c4:b8:61:e8:57:e2:98:c7:
eb:8a:74:87:d6:59:63:5d:f9:b9:19:aa:92:47:70:
b6:92:50:fe:04:99:8c:5e:d9:9c:4a:a0:b6:32:63:
05:b4:d8:fa:67:ad:59:39:85:29:f8:1c:ff:9b:c6:
a4:3a:4e:32:48:3a:c9:da:b4:3d:40:1b:3b:6f:bd:
88:08:3d:19:59:2c:55:d1:ff:13:36:d2:91:73:ac:
ee:a8:3a:ef:06:36:d1:06:5a:ab:33:9e:ca:47:8d:
54:40:1d:1d:71:f2:74:98:54:a1:49:58:5c:47:20:
22:87:cf:a8:a3:35:0b:1f:ed:26:e5:57:13:0f:d2:
6e:66:19:a2:25:4d:b2:7d:c8:f8:93:1c:3d:b7:87:
eb:38:fe:80:54:79:94:41:ba:87:fd:28:d7:0d:f4:
b6:92:07:78:4b:ea:d8:c1:50:82:5f:40:1d:92:98:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:46:95:89:63:F3:9E:0A:CA:21:95:D1:59:95:05:97:81:50:B2:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e3bfda70-aaaf-3ccf-a6d8-a1b8faece258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.98.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:a1:d6:dc:2b:54:ff:73:f0:06:5f:e6:9b:cd:f6:42:50:86:
f7:c8:f2:8f:f6:84:8a:62:4f:7d:19:f4:60:54:3f:bc:31:4a:
7a:26:f3:12:e4:ba:18:85:94:33:44:90:58:02:ef:18:b5:4b:
69:d2:58:73:dd:67:27:2b:1a:0b:8d:a3:88:04:6d:a7:5f:a4:
c3:dd:a2:ab:9b:84:ab:9c:18:5f:81:b0:88:0b:1d:60:c8:d9:
b4:5a:60:c0:59:fb:fe:a7:ab:03:91:a3:76:ee:f2:28:4f:72:
be:a8:41:e2:49:e9:9b:b8:05:43:05:af:c2:51:43:93:ec:cf:
16:40:44:dd:20:fb:2e:fc:3e:a9:0e:e5:b0:5a:20:b0:a0:dc:
9a:f8:e1:79:aa:1c:b9:44:7a:e8:d4:e4:df:d1:42:4e:5a:ed:
9f:54:9d:9c:d7:21:55:1a:f0:d9:f9:c1:e2:b5:08:99:6c:a3:
ee:16:01:63:2e:0f:14:e0:ef:9e:09:1f:37:d6:e7:0a:e3:02:
dd:aa:bb:e9:6f:d4:68:3e:08:87:ab:6d:6f:fc:15:cf:ba:3e:
3b:83:39:64:bf:7a:60:fd:de:75:0c:24:66:92:57:55:a4:6b:
e1:12:65:5d:a1:8a:46:62:2c:02:ad:5e:52:30:a5:f3:df:f8:
c0:3c:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:40:46 2025 by rpki-client