Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecf4e351-76f9-3693-988c-16fa6c0e9465.roa
File: ecf4e351-76f9-3693-988c-16fa6c0e9465.roa (raw, json)
Hash identifier: S6ifiCR/8VlUTFcKxosuxKrfmnDoMxJ/M1mnTev6654=
Subject key identifier: 09:2C:02:6B:65:2E:10:08:EF:67:18:C4:F6:28:E0:48:7D:FC:63:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840A02242B8AB1142BDC6663700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecf4e351-76f9-3693-988c-16fa6c0e9465.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.54.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a0:22:42:b8:ab:11:42:bd:c6:66:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=4e655419-5ef2-445c-b21b-5c750ab156e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:b3:7e:16:6f:c5:07:49:20:1c:0f:fa:ad:
7e:f4:55:bd:b9:e4:86:af:26:82:9c:1a:d6:e0:52:
25:67:ee:cb:96:65:ce:be:1b:4c:9c:e9:fb:b0:ec:
df:21:89:d9:f7:31:c4:04:82:c5:5c:25:c5:d6:2f:
c6:97:8c:95:5d:8b:46:0b:31:85:05:42:44:d6:65:
6c:95:75:6b:c7:e0:02:e0:ae:8e:98:e5:aa:8a:f0:
c1:ee:1a:22:aa:d1:46:7e:5b:5e:a1:ef:41:84:ad:
50:f4:1e:a4:4a:57:fb:60:9a:b3:41:3f:58:09:5d:
bb:e6:55:db:3a:e5:23:fa:ee:d5:f1:ad:6e:c7:31:
dc:61:e7:86:20:2b:e7:e0:d0:ba:64:3d:0c:db:d1:
5b:e4:0d:14:1a:35:07:5f:52:f0:7a:7e:5a:7a:56:
33:fa:cf:fd:38:ad:5f:1a:4a:c3:ce:05:46:d8:d4:
ea:2e:bd:8e:31:a6:7a:da:f1:4b:36:64:3c:86:21:
7c:2c:36:0e:69:4c:29:2b:b6:e6:e8:1c:41:b6:18:
da:f6:f4:c4:93:e2:e7:c4:05:21:13:58:46:db:23:
ec:c6:35:b0:64:3d:35:4f:6e:8a:2d:c7:d0:37:1b:
38:05:fc:13:9c:ec:db:4f:fe:aa:3b:59:01:59:54:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:02:6B:65:2E:10:08:EF:67:18:C4:F6:28:E0:48:7D:FC:63:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ecf4e351-76f9-3693-988c-16fa6c0e9465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.54.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:e1:20:16:0a:16:c7:5a:ec:e4:62:80:82:e2:45:5f:25:da:
0d:2a:68:a9:55:92:ee:e6:6b:6e:73:7b:0e:d6:c4:8c:ad:14:
9d:74:16:7a:de:0c:6c:a8:2e:6d:bd:ba:78:b5:ca:1b:fc:d5:
ba:5c:f6:27:3f:b8:34:6f:64:3e:9a:77:a7:d5:2b:7a:49:1d:
f5:a5:66:8c:2e:3f:66:b4:eb:6d:ee:da:27:99:f1:44:4a:a9:
ee:50:4a:c0:bb:67:bb:3c:cb:f3:5d:4a:45:ae:8d:bf:3a:39:
54:8b:63:25:b4:9d:69:1f:f8:78:2f:85:01:ed:7e:6b:44:d0:
23:b4:e4:62:b3:5c:40:e1:81:b4:cd:6b:ae:a5:e3:37:fc:04:
40:42:e3:0a:04:9d:4d:ad:72:d0:e3:a4:9b:1e:98:a9:13:d8:
d4:ca:96:87:49:33:4a:97:8c:46:94:21:7e:d9:70:04:3f:7f:
bb:8b:ef:9a:b8:53:31:5a:ba:89:09:e3:88:00:07:7f:1c:c0:
48:da:e2:d2:68:0d:7a:d5:72:b8:f1:d7:5b:a1:b0:8f:51:84:
a5:56:14:e0:53:70:ab:38:5b:d3:93:f0:94:fc:6e:7a:74:d3:
24:11:05:7b:db:64:c3:e6:72:a2:3e:49:a4:01:ce:6c:0a:b0:
16:e0:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:15 2025 by rpki-client