Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f057e56b-5dfb-3f2b-ae68-0762d8ea72ef.roa
File: f057e56b-5dfb-3f2b-ae68-0762d8ea72ef.roa (raw, json)
Hash identifier: Fu0FGU2ZRtjNfNZd8Yk2MYUwoD4bbouGgvwszm3Rh2M=
Subject key identifier: E1:24:23:43:8A:B7:4C:87:48:75:A8:19:7C:C0:39:A0:4D:54:D3:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409A6F6127C5D6DA8936CEDC60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f057e56b-5dfb-3f2b-ae68-0762d8ea72ef.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.68.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:6f:61:27:c5:d6:da:89:36:ce:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=7aae7450-30af-4b71-9644-e7e6904555d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:67:b9:78:7e:46:84:aa:d5:e6:53:46:61:
c1:d5:19:8c:f8:c3:27:39:85:bf:b0:af:4c:e3:f4:
a4:c6:82:9f:ec:3d:2c:9a:f3:cc:11:36:90:db:10:
07:5d:13:9a:66:18:1f:75:58:75:66:ac:b1:de:71:
0a:c3:66:81:5f:08:0c:b0:7b:0b:43:57:23:9d:fb:
bb:a3:d5:8c:f7:56:9d:5d:7b:ea:9f:5d:2b:95:6c:
55:c3:f5:e9:19:87:e3:dc:5b:bd:10:c5:12:3a:3b:
1d:76:c8:ad:ea:7f:1a:76:7b:b6:ac:4c:ab:19:ac:
2f:9e:32:e3:2c:2b:1a:17:b1:88:ee:32:14:64:64:
ce:30:0b:f8:45:da:9f:08:e4:85:a4:62:4f:1a:9d:
af:74:8f:36:ed:27:bb:3e:a3:af:61:0b:ed:e7:d7:
a1:59:e2:00:bb:2a:06:6d:c3:1b:63:9d:00:31:88:
16:dd:85:68:1d:1e:91:bc:32:b4:16:ee:22:a0:17:
12:3e:0a:79:eb:2e:c5:ee:d0:2a:ac:c7:59:cb:6e:
28:be:42:d9:c5:ec:f6:cf:e6:12:bc:3b:9d:f5:d6:
c6:2a:6a:1f:49:53:a9:87:cd:30:ae:fc:e1:6f:95:
a2:2e:7b:4d:5d:ca:29:d2:cc:6b:4d:0a:b5:0b:0e:
eb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:23:43:8A:B7:4C:87:48:75:A8:19:7C:C0:39:A0:4D:54:D3:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f057e56b-5dfb-3f2b-ae68-0762d8ea72ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.68.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:4a:b6:9a:34:ad:ef:d7:cd:91:4d:14:c2:88:6b:79:be:35:
9d:72:65:51:f6:1e:ca:e0:2d:8e:05:29:7f:2c:58:6f:89:6c:
0b:cd:f9:89:02:39:92:ff:88:17:40:bb:01:91:b3:b4:9b:f5:
8f:fe:e3:ec:97:c5:ef:90:15:94:0f:13:b3:ba:88:73:fb:77:
c6:0e:74:4f:93:89:ec:c7:99:09:3d:c8:29:c4:e8:f0:58:b7:
95:dd:4c:65:6b:6f:17:f9:3d:9b:60:a1:aa:41:f8:25:c1:d5:
aa:90:7d:c2:71:ff:f2:4d:51:44:c9:0f:d6:1c:5e:f1:14:c7:
d8:03:78:0a:ac:c6:de:29:56:44:1e:8b:e0:49:ec:57:e8:f4:
c2:12:fa:3a:78:2f:89:45:8e:bc:a0:32:22:47:ee:15:83:f8:
b9:de:a6:1d:a5:8f:16:9a:5b:c9:08:57:3f:57:e5:31:bd:21:
26:3c:79:d4:16:5d:43:c7:1b:26:8f:93:b8:eb:40:c6:7d:25:
d5:0c:67:6e:0e:7e:3f:03:86:66:cf:1d:68:0c:e1:71:da:5a:
82:d2:1d:6d:81:78:20:4c:3c:cf:96:68:fc:86:82:05:ee:84:
50:54:50:85:b3:ea:c0:a0:fd:16:b2:d1:f6:f6:62:e9:7a:a1:
8e:b0:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:20 2025 by rpki-client