Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70427be-984a-300f-8327-b81db3718f87.roa
File: f70427be-984a-300f-8327-b81db3718f87.roa (raw, json)
Hash identifier: MGWak8jcumLyNJfpx36hdneI34+4ed4QwQ5qq9G0nYU=
Subject key identifier: 38:0B:83:FF:86:69:B5:DE:20:33:ED:ED:FA:EA:4D:CD:E8:80:DE:E5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584078EF08B209AB523049397000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70427be-984a-300f-8327-b81db3718f87.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:ef:08:b2:09:ab:52:30:49:39:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=408eba0c-c080-4c2a-b4d2-8525447b8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:22:93:c6:44:19:7b:b4:0c:95:67:6b:f6:
2d:b6:e9:0f:17:b8:cf:45:4d:cb:01:31:c3:99:e2:
e4:6e:c4:bf:c1:06:53:df:e3:5c:bf:7c:f9:1a:ba:
aa:02:e4:35:e8:ac:1a:e0:c9:b0:fe:10:35:e7:e1:
6e:81:93:e2:be:c8:b8:bb:bc:78:72:a6:00:3c:7f:
30:8d:9b:7b:8c:d7:64:09:b3:4f:27:62:41:ea:e1:
24:c3:55:f9:8d:24:bf:01:80:ec:29:67:92:f2:a9:
a7:1c:de:42:85:8b:45:69:e3:66:f1:6e:44:31:4a:
0d:a9:89:33:f6:0c:cc:c2:fb:b7:87:a7:50:ff:9a:
80:38:f1:92:3e:4b:84:cb:26:ec:9a:c8:49:8e:cf:
f7:ed:f5:c1:27:fd:43:fd:32:99:18:77:27:54:49:
3d:6c:cc:07:5e:82:dc:e3:2b:80:4c:3c:e5:1b:a5:
84:db:f8:07:bd:77:fa:22:aa:33:d1:5e:75:19:25:
36:b9:ff:b8:50:c6:ee:04:a9:2b:cb:a8:db:46:94:
c1:8d:1c:43:8c:7c:08:1f:62:9e:b9:05:a2:5b:4b:
55:9c:6e:36:13:66:35:33:93:5b:00:00:13:71:54:
55:22:1d:de:bd:c2:98:36:d0:fa:02:20:09:47:e8:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:83:FF:86:69:B5:DE:20:33:ED:ED:FA:EA:4D:CD:E8:80:DE:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70427be-984a-300f-8327-b81db3718f87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:a1:d9:08:a1:ce:43:a5:eb:43:72:10:20:81:c1:f7:3c:5e:
d5:75:f6:fd:bc:e7:46:19:4f:fb:ce:39:3d:0b:30:0b:52:c8:
d3:c3:57:db:1e:a6:d1:45:d5:db:06:ef:b6:02:10:51:8d:eb:
8f:6e:80:e1:93:37:18:1f:dd:73:ef:ff:0a:d2:38:50:26:84:
6a:86:f4:1f:2e:99:50:fc:77:53:56:47:74:22:73:64:23:88:
79:21:17:1c:1c:36:1c:fd:5a:68:ca:45:b3:28:d4:87:85:f2:
8f:63:f7:c2:03:3c:d6:56:a5:1e:71:4f:b6:30:e8:03:ca:13:
f2:c0:6f:ba:48:95:05:9e:8f:55:ad:a3:2e:c5:b9:b5:d9:ea:
ea:51:14:c8:1c:ca:3c:52:ca:7e:7f:b8:dc:7f:d2:57:78:3f:
d1:0a:d6:cf:2f:48:78:89:42:91:73:9f:5e:2f:20:9b:39:75:
04:c6:fe:62:4b:bd:39:07:71:21:84:54:30:62:d6:0c:90:09:
9d:68:4b:25:28:95:27:26:62:6e:8e:a2:97:a7:17:0e:ea:6a:
09:cd:3f:59:13:4b:79:b1:9d:3f:ee:06:dc:f8:f1:c9:60:d4:
d9:6a:b2:21:ec:06:53:41:8a:a3:4a:68:f4:94:38:b0:5d:9d:
2e:76:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:50 2025 by rpki-client