Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03c880ee-993c-3c97-a352-e3a12b8fb82b.roa
File: 03c880ee-993c-3c97-a352-e3a12b8fb82b.roa (raw, json)
Hash identifier: D/Bcg1JgKI2k8NhOChXaaLrbwP4D1jMSaiV8KKKMufo=
Subject key identifier: F5:B6:AF:EE:9D:F2:B7:E1:3D:45:D0:71:96:1C:11:35:E9:6A:44:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB2343C9CCF9F1A45AC512100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03c880ee-993c-3c97-a352-e3a12b8fb82b.roa
Signing time: Sun 24 Apr 2022 12:00:00 +0000
ROA not before: Sun 24 Apr 2022 12:00:00 +0000
ROA not after: Mon 30 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b2:34:3c:9c:cf:9f:1a:45:ac:51:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 24 12:00:00 2022 GMT
Not After : May 30 04:00:00 2022 GMT
Subject: CN=98a5b4b6-6c49-4553-aebe-96e8b90cefc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:da:71:d5:3b:b7:ca:b3:5c:2c:f8:d9:ab:
86:61:b7:e1:db:32:0f:ab:3c:0e:3e:8d:da:9b:2d:
5d:44:67:e1:24:10:34:00:61:65:8f:cc:01:26:c1:
44:01:e9:ed:e9:c8:c3:3c:c6:d6:db:b1:23:b3:f3:
8e:a1:03:e2:e7:ee:55:a6:5d:ff:df:1b:54:3e:81:
97:be:81:ad:00:db:b1:09:71:cd:a5:99:94:d0:aa:
47:3c:be:e3:7f:0c:1a:46:d0:2c:01:54:7e:3f:41:
18:5a:2c:68:fe:ac:3b:55:f7:94:64:d3:3e:4c:ae:
76:60:49:3c:d5:82:18:2d:6a:c8:e5:94:a6:d2:78:
32:0e:76:90:81:e5:55:45:c3:e6:3e:21:f4:30:c3:
ad:85:1d:36:e8:0e:09:e4:7d:17:33:b7:32:7f:1a:
9a:49:14:b2:cd:68:25:f4:f8:29:03:68:14:09:3f:
f6:71:da:8e:28:5a:fb:91:0d:2d:46:a6:56:9d:40:
04:1a:ca:70:61:dd:d9:68:7b:8f:0b:3f:d4:72:56:
37:cd:11:d6:42:c8:20:e7:22:ff:8d:07:27:2b:25:
8c:1e:cd:4a:14:f0:07:bc:31:29:5c:1f:55:b8:22:
74:8c:de:74:8c:a9:c8:dd:73:d3:71:5c:aa:68:be:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:AF:EE:9D:F2:B7:E1:3D:45:D0:71:96:1C:11:35:E9:6A:44:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03c880ee-993c-3c97-a352-e3a12b8fb82b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:41:26:7d:73:78:b2:94:28:54:d0:08:c4:e6:03:07:d9:2a:
68:04:01:50:c4:da:f6:4b:af:e7:6b:f1:70:52:8a:da:7a:e0:
ad:00:22:36:f2:bf:4f:2f:82:44:d8:89:82:6b:8e:e7:98:43:
7b:af:b3:17:bc:36:9a:e4:54:43:cb:df:d2:58:e9:2d:1e:c5:
6d:c8:11:ec:76:1d:0a:49:13:c4:a0:65:0a:eb:05:12:a4:51:
3a:e7:c7:a2:4d:57:df:37:30:56:7d:7c:3b:76:f7:67:4f:95:
99:91:7f:08:f9:8d:db:0b:cb:74:ae:ed:3a:09:ac:ce:61:90:
d4:b1:4c:a6:6b:6b:cb:02:cd:53:f7:69:75:7f:51:a0:6c:c0:
46:3b:f3:c8:6e:71:22:21:2e:e9:62:41:66:f4:cf:66:c7:56:
39:1c:4c:71:9c:c2:dd:bf:7b:ca:16:81:78:40:2f:81:04:d4:
c2:34:76:79:40:84:06:7d:0f:af:94:9f:a4:66:62:28:f3:4c:
12:56:5a:de:44:c3:59:17:0f:44:3a:c3:28:24:60:73:56:6f:
f5:c0:f3:0f:c4:ee:c7:ca:fd:51:27:63:55:b8:5a:3a:64:eb:
bc:a5:ca:f7:a5:61:1d:fc:65:13:80:33:e2:98:c0:3e:13:e4:
cf:ac:2a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:03 2025 by rpki-client