Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3aea457-327a-3e84-9ea5-20a3cc1c6292.roa
File: f3aea457-327a-3e84-9ea5-20a3cc1c6292.roa (raw, json)
Hash identifier: gNMfThd805lzskG09d8/UzcVRqTVHGK9l67LbkYP4gw=
Subject key identifier: 3B:69:FE:73:1E:18:17:71:8C:0F:17:71:5C:9C:73:B7:A1:30:6B:17
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840002241068365AA211BE59980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3aea457-327a-3e84-9ea5-20a3cc1c6292.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 56.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:00:22:41:06:83:65:aa:21:1b:e5:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=e65e17cd-2abe-462d-8af7-3672dcb060c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:87:ea:2c:50:69:3c:a3:57:c7:c1:ee:61:
43:9c:d4:63:61:06:49:50:07:a3:14:f5:67:0d:ed:
39:0a:2f:c2:b8:08:5b:e4:60:17:61:06:9a:35:ce:
ce:9c:1e:47:15:bf:7e:dc:6b:44:36:88:81:02:96:
89:d8:66:18:4c:21:f6:7d:5d:e0:2c:20:b2:ca:01:
6e:1a:b4:26:a1:2e:3e:14:4f:15:de:71:a4:7e:68:
b7:52:df:5a:25:52:fa:39:c0:90:2e:31:a5:15:e4:
9e:a9:49:62:c6:d8:67:cd:5d:ae:e8:4e:92:df:fe:
cf:92:bf:4c:75:0f:2b:77:cc:4c:d3:7f:40:1c:f5:
51:63:56:77:dd:70:ea:1c:61:d7:b0:b6:82:9d:a3:
f9:c9:b3:7f:28:8c:fb:a1:bc:ab:cc:c6:fe:5f:be:
5e:30:a7:8c:bc:92:05:0d:8b:e0:24:73:9c:b6:52:
b7:22:bf:f6:d3:16:3d:be:c5:57:25:32:05:b0:65:
4a:38:bc:f3:56:25:b4:3a:44:03:c4:9c:ee:98:ea:
ee:d8:32:9e:44:e7:c3:60:0c:c8:76:6a:70:da:fc:
79:b3:e9:ad:49:2c:ab:0d:84:a1:b1:ab:f1:76:1c:
65:a8:ae:b6:c7:74:78:7e:21:26:2f:a5:4b:72:14:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:FE:73:1E:18:17:71:8C:0F:17:71:5C:9C:73:B7:A1:30:6B:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3aea457-327a-3e84-9ea5-20a3cc1c6292.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:83:a8:59:85:fa:8b:9a:29:75:a0:03:c2:b1:bc:b5:99:98:
e0:25:8e:54:fd:c8:9a:81:7e:1b:c6:2e:04:0f:8f:35:43:8b:
ef:c3:f4:9e:68:53:b5:41:ca:7b:4c:a0:ae:93:be:7f:42:8e:
15:93:5f:5f:fd:96:ac:1b:d9:3f:bc:6f:a7:21:d7:26:6d:1a:
98:ff:9e:69:0e:f5:f4:ac:af:05:b3:bb:cc:6b:49:1f:69:aa:
d2:c3:14:4c:c8:9a:f6:6c:52:f5:7c:e1:f3:87:29:fb:82:ab:
eb:c7:95:ef:1d:6a:02:2d:fb:28:8e:de:98:94:bf:29:00:34:
76:79:c7:93:90:10:d2:dd:12:97:04:00:ce:4a:69:d2:85:23:
9c:c0:3e:f3:4e:af:47:87:b8:f4:6d:98:31:21:8d:ae:1a:59:
92:e9:9a:cf:9c:da:f2:e6:51:0c:1c:c7:5e:dd:6a:5f:ad:a1:
17:e7:ed:e0:bf:b6:69:04:15:c0:41:a3:3a:47:51:55:c4:9f:
bd:a3:2e:5f:10:6c:b1:91:db:63:3b:13:db:c1:d9:3e:15:7a:
a8:df:99:33:f0:a6:7b:83:11:02:85:bd:c4:dd:4f:7c:e3:09:
67:8f:3c:20:57:c4:fa:8b:fa:b9:7a:d9:73:13:7d:3f:0b:e2:
6c:c5:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:37 2025 by rpki-client