Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0299d2ac-5db0-349a-9ca5-1898b4fbdab8.roa
File: 0299d2ac-5db0-349a-9ca5-1898b4fbdab8.roa (raw, json)
Hash identifier: EFQRnRCh2m9Bre0vmMhif+Jti+6w6nhu6Rl1d6zeJ4E=
Subject key identifier: 60:40:63:60:CF:53:1C:69:19:BD:2E:F7:F2:1B:7F:95:3C:85:8D:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C9234C6FEB50C8F75BE9A300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0299d2ac-5db0-349a-9ca5-1898b4fbdab8.roa
Signing time: Thu 02 Feb 2023 12:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:00:00 +0000
ROA not after: Fri 10 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c9:23:4c:6f:eb:50:c8:f7:5b:e9:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 12:00:00 2023 GMT
Not After : Mar 10 05:00:00 2023 GMT
Subject: CN=63a895b4-a527-43ff-a6a8-efc07a94db2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:96:e8:3c:fb:4d:30:fe:b6:c5:53:b1:35:
c1:3e:75:79:a4:21:33:af:1d:a5:50:3e:d7:70:0b:
67:2d:4b:04:37:27:b7:b5:23:c8:39:8c:3b:72:33:
8f:78:01:f6:4d:df:43:22:fe:c3:46:03:27:a1:8b:
8f:b7:14:fa:c1:f9:2c:97:0e:24:26:21:5c:47:62:
b5:84:18:eb:1d:03:da:03:56:d0:34:51:54:0a:af:
44:a0:b5:05:5c:93:05:b7:6a:8a:ce:8b:aa:09:56:
da:23:73:34:ff:29:1f:00:d6:9a:0b:d5:b6:6e:65:
da:b4:05:17:de:73:3f:ae:4c:e4:d4:5b:73:0e:45:
dc:14:2f:d0:b5:b1:e7:59:a2:b9:8c:10:c1:7f:92:
ab:e8:ef:50:26:f3:ce:cc:ca:4e:17:ad:08:7c:7a:
35:56:16:91:ca:8f:0d:67:93:37:ec:d2:32:d6:3b:
87:79:85:77:99:50:93:a0:3a:3a:4e:91:3a:cb:9a:
d9:ac:5e:e9:65:88:4d:9f:6d:87:d0:83:79:fe:e5:
66:32:d7:16:4e:0d:b1:eb:bf:75:53:af:2d:c5:8d:
99:cd:2d:44:60:f9:73:9b:8d:cd:4f:aa:bd:ef:66:
ad:3c:5f:b8:76:49:8c:2b:ac:52:0d:80:7e:7d:a8:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:63:60:CF:53:1C:69:19:BD:2E:F7:F2:1B:7F:95:3C:85:8D:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0299d2ac-5db0-349a-9ca5-1898b4fbdab8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.201.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:34:3d:94:cf:45:c5:c7:e7:41:86:bd:42:05:d6:1b:6a:40:
7a:ad:72:15:88:36:89:ca:0c:12:96:3e:55:5f:c6:86:49:fd:
fd:e4:f0:90:c7:09:50:8c:2b:db:c9:7c:ff:bc:93:54:d0:94:
f9:13:cb:0f:97:22:0b:bd:3a:f3:89:25:83:c3:33:f4:fc:0c:
a0:76:59:c7:c2:5f:4d:48:dd:82:71:e3:8e:46:8f:dc:e9:53:
ed:fc:10:70:e0:ff:9b:54:02:d0:27:91:30:85:3a:0b:bb:60:
7b:d3:58:86:bb:37:ca:f1:76:32:32:91:bb:bb:15:08:17:62:
38:db:e7:20:08:11:46:9e:17:46:87:f6:ce:d6:3a:09:5f:a1:
4b:92:3b:ac:b0:a9:63:af:54:9f:13:08:e6:58:16:be:f7:00:
d2:7d:21:13:bc:39:8e:c8:5f:82:15:d0:3e:74:14:34:7e:bd:
b1:41:ff:55:f2:2f:6c:37:61:79:f9:f2:f5:9f:26:64:31:10:
0b:09:31:38:df:f5:19:86:5c:b1:67:6a:9c:7f:10:e6:f3:6e:
90:07:83:3b:7f:16:d2:06:7c:56:be:46:03:15:71:6b:51:f6:
dd:94:b5:38:c7:16:14:78:c0:8c:99:d5:f7:a4:3d:3e:b4:91:
dd:1f:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:33 2025 by rpki-client