Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9c8cb2d-5b38-30ad-a72d-2f00a2253b79.roa
File: e9c8cb2d-5b38-30ad-a72d-2f00a2253b79.roa (raw, json)
Hash identifier: j3xGYxnm9tsPlQDhSUvhO+JKWYQtzg3fsC/Ek+2FlWg=
Subject key identifier: 6C:65:A9:C6:DC:01:73:FF:EA:E5:D5:69:9F:17:0C:54:4B:E5:21:DD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840752E8609A969DA35DDBEA680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9c8cb2d-5b38-30ad-a72d-2f00a2253b79.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:2e:86:09:a9:69:da:35:dd:be:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=47186de7-dd75-42df-b4a2-3292a2a10933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:3b:7d:4a:b4:54:4e:80:4f:c8:ec:b4:02:
94:f7:ec:a3:72:54:79:f3:71:ff:07:8f:a2:a3:4f:
d7:38:f9:9f:01:29:81:d8:53:7d:c8:ee:36:c8:3f:
c5:a9:46:e1:d8:fa:f6:64:9e:9f:eb:a4:be:0c:35:
dd:02:52:37:8f:ea:09:87:33:c3:33:8a:d1:3d:1d:
8f:89:12:36:ef:a0:40:b0:16:a4:99:28:4d:b9:f1:
d3:d3:df:d0:36:6c:d9:4b:f3:1c:ff:98:a1:cc:fe:
21:16:8d:a9:5f:4a:7c:b0:73:3a:35:67:6e:44:f2:
e3:2b:32:c1:c7:3d:c2:08:b5:43:ff:fc:35:2b:00:
48:15:26:cf:d8:c1:6a:bd:34:8f:bd:9b:60:e3:f5:
26:13:47:72:be:5c:db:88:c5:c8:ed:ac:af:58:91:
60:13:8c:c0:8c:81:63:da:59:7c:2b:c3:b3:cd:b6:
c1:f7:e6:e3:27:04:99:3a:08:be:9e:56:9f:32:fd:
75:ab:de:41:2d:62:a2:b2:13:ea:77:9f:e6:e2:41:
58:7e:87:8d:75:45:c9:d3:da:e3:a5:9d:a5:1c:b6:
0e:24:f6:a4:6f:6d:4b:e6:14:fa:36:ce:3e:15:99:
70:99:7a:82:7b:4f:37:76:af:a8:2e:c0:75:58:8b:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:65:A9:C6:DC:01:73:FF:EA:E5:D5:69:9F:17:0C:54:4B:E5:21:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9c8cb2d-5b38-30ad-a72d-2f00a2253b79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:82:fa:0e:ff:26:19:70:8f:e9:e5:41:f2:12:b4:d4:93:e7:
4b:c6:4d:8a:de:9a:ac:50:c8:46:1b:b7:b5:f9:e6:e5:f3:af:
1c:d9:77:ca:22:2d:5c:c1:90:dd:ff:93:ed:10:a7:aa:92:ca:
b5:c5:eb:4b:c2:c1:54:dc:d0:1a:15:b1:be:35:2b:ae:68:55:
cb:25:4b:81:29:d5:91:da:30:04:69:d5:5d:d6:e0:08:80:b4:
35:37:24:87:a8:6b:49:03:23:a3:c7:ce:b7:4d:3b:30:f8:18:
5f:b7:f8:aa:a9:c8:de:4c:40:e5:eb:80:f7:9e:f1:f1:a1:09:
da:15:84:0c:48:82:40:b8:be:46:b5:7a:da:48:1a:7a:9e:76:
45:9a:ac:bb:a6:6f:43:2a:31:86:0d:d8:56:56:59:19:33:bc:
9d:df:66:94:04:99:8f:ca:27:02:66:a6:4d:60:f9:f8:81:07:
66:74:c2:25:27:bb:f7:e5:fb:0f:60:24:33:0e:be:9f:1a:31:
55:60:e7:19:af:c1:2f:a3:c8:b5:7a:54:b7:78:99:c7:c0:a0:
52:a8:b0:31:22:69:ac:0c:6c:d9:58:d4:e2:a0:50:fd:13:cf:
27:9f:fb:89:69:77:d8:b7:19:f4:b6:17:df:09:61:01:d3:9d:
09:ec:f3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:46 2025 by rpki-client