Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76fc49e-513b-3b77-8c0a-a3b7fbd967db.roa
File: f76fc49e-513b-3b77-8c0a-a3b7fbd967db.roa (raw, json)
Hash identifier: EXJjvnXHtT6bntQQtDASgb5DWPX1046k4sN9kVLg1LU=
Subject key identifier: 52:BF:44:FC:5C:AB:F3:62:81:DA:2E:D9:EB:61:74:96:FF:1F:E6:3C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403B0CD569172829E1676D3A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76fc49e-513b-3b77-8c0a-a3b7fbd967db.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3b:0c:d5:69:17:28:29:e1:67:6d:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=ede348b5-c838-40ef-bddf-56b01e98cb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:e2:2d:9f:87:05:be:27:a7:f8:e5:6d:81:
4c:2c:97:5c:0c:15:2d:d3:96:90:97:a2:37:93:ee:
d2:d8:ac:75:36:c0:7e:60:73:5a:1d:ca:0e:7d:21:
bb:af:4c:0c:55:d0:6d:03:9f:6b:79:c3:4f:31:07:
73:89:bf:2a:27:e5:01:ad:09:13:7f:d9:7e:7d:ab:
e8:c8:90:1d:63:e0:c7:9f:1c:79:f3:47:33:de:bd:
c8:86:60:f9:cc:68:de:f6:c6:27:db:08:a5:65:a4:
bb:55:62:d6:65:e1:05:11:b6:06:08:95:e7:67:a0:
51:dd:4e:38:dc:ab:bb:d2:f5:54:69:90:97:27:29:
2a:96:f6:ae:6b:70:d8:4e:5a:dd:3a:62:5f:b3:0c:
e0:6f:e1:40:f3:88:83:2c:40:33:b8:33:ea:e8:f7:
27:68:a1:cb:b9:6d:4b:5d:78:a3:e3:a0:97:12:d6:
9a:cd:94:09:29:25:98:67:ae:01:79:d5:7f:33:bb:
77:ca:ca:49:a6:ef:11:62:91:50:68:f9:a7:55:39:
89:db:d0:f4:a9:92:75:05:9c:37:7a:aa:87:d4:86:
25:60:e3:da:10:b9:36:7f:a9:25:d4:2f:a1:47:d1:
fe:fc:c6:d5:18:1b:e7:53:ab:74:df:ee:3a:ec:c0:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BF:44:FC:5C:AB:F3:62:81:DA:2E:D9:EB:61:74:96:FF:1F:E6:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f76fc49e-513b-3b77-8c0a-a3b7fbd967db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:c9:1d:d3:fe:45:aa:98:d4:8d:13:39:cf:da:96:1f:5c:ac:
0b:cf:3b:b9:7e:cd:c6:e4:6b:28:d5:07:48:12:fa:83:2e:b5:
ea:97:f8:f3:3d:cd:9c:3c:2f:7b:28:34:84:92:3c:56:59:bb:
87:4e:05:80:5a:22:4b:6b:98:b1:58:46:12:e7:a2:05:1d:fb:
49:09:99:73:4f:5d:04:83:56:f6:12:f0:50:51:30:6b:97:14:
12:b3:cb:a2:b6:bb:c5:d3:47:c9:11:fe:25:39:6d:07:b2:5c:
96:be:15:d3:ac:ec:18:af:f1:82:8a:3f:5d:56:5f:22:2e:2b:
c7:9b:b8:1f:dc:10:6a:a2:29:e2:a3:68:2f:2a:c6:ce:f9:6a:
40:46:ef:25:ae:ee:44:af:ef:20:cf:0f:00:9d:55:b5:62:2d:
1e:f7:7a:51:ef:1a:a2:52:0a:46:42:9a:64:47:08:d9:f9:53:
25:73:ab:b0:46:d9:a8:71:14:f2:52:81:99:1b:17:51:8a:e1:
2f:50:6f:a1:14:a5:a7:ef:77:66:bb:14:8d:92:b6:7a:3f:80:
bb:fb:b5:1b:0a:e0:41:39:19:3f:68:5f:f0:05:36:ae:d5:98:
2b:69:42:8e:68:c2:94:5f:4e:26:26:c7:7b:d7:91:0e:92:a5:
ca:79:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:05:48 2025 by rpki-client