Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/058914d4-d147-3b0d-9e33-95e3a450508f.roa
File: 058914d4-d147-3b0d-9e33-95e3a450508f.roa (raw, json)
Hash identifier: FkU+JvNxR1ai3/8SCzNJzYxwJn60azXWolPeXCPFb0I=
Subject key identifier: 84:D2:D7:FD:95:0D:64:F6:5D:7C:5B:E0:F5:DF:47:CE:08:B5:89:0D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CEE9C2D6CD7B286AA9F1B2A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/058914d4-d147-3b0d-9e33-95e3a450508f.roa
Signing time: Mon 14 Feb 2022 05:00:00 +0000
ROA not before: Mon 14 Feb 2022 05:00:00 +0000
ROA not after: Mon 21 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ee:9c:2d:6c:d7:b2:86:aa:9f:1b:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 14 05:00:00 2022 GMT
Not After : Mar 21 04:00:00 2022 GMT
Subject: CN=3edca48c-1eed-4650-b799-68317a8036f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:a0:2a:f4:b8:30:b6:05:b2:fe:88:1e:a3:
43:1d:39:e1:a8:41:9a:55:16:7d:69:7c:1d:05:d6:
a0:8a:fc:ee:f9:f5:48:96:79:c0:34:f4:f8:94:e9:
56:bd:f8:ee:4e:73:a5:bf:32:ba:78:fd:f5:16:3c:
6e:52:a5:fe:03:50:c3:4f:9a:93:43:c5:d8:ea:07:
bb:d3:cc:03:d2:3a:ce:fe:c0:ca:ed:e9:01:54:b9:
3e:eb:63:df:63:43:2b:39:15:76:0e:63:56:b0:f1:
b1:de:22:9d:4a:e9:c3:9a:38:a3:22:18:b4:81:76:
f2:5b:80:0c:3e:da:8b:ec:a4:32:67:6d:5f:dd:40:
30:47:bc:4f:df:e3:0d:d4:ab:02:25:b1:2c:24:c6:
44:ce:28:0e:10:81:c3:65:e0:cd:90:af:d8:6d:22:
ca:2f:28:74:2c:26:26:1f:54:49:20:df:6b:39:86:
97:0a:b6:33:e1:4e:5b:83:4b:37:5f:d5:bd:cb:ec:
fa:48:42:2b:10:75:18:42:d4:5f:3e:fb:13:b7:f0:
15:55:13:00:e3:a9:e0:43:ab:21:c7:f5:76:5c:4f:
40:62:22:2a:6c:d5:1b:70:37:f1:a4:cd:f3:28:94:
5c:74:23:2f:09:e1:a4:cd:62:9a:30:80:11:ec:99:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:D7:FD:95:0D:64:F6:5D:7C:5B:E0:F5:DF:47:CE:08:B5:89:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/058914d4-d147-3b0d-9e33-95e3a450508f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:28:96:8c:3b:e4:8a:73:7a:45:21:ba:81:de:0f:72:c7:90:
76:7c:17:ea:1c:0b:33:f9:a7:da:74:3e:d6:bb:ff:fb:d9:8a:
a3:9e:75:3f:94:74:b0:86:90:5d:bc:ee:18:fd:73:48:46:15:
21:e6:35:73:c8:83:88:af:da:c9:64:2d:c9:37:6e:1c:21:18:
81:16:db:6d:0b:aa:de:07:9e:4c:d3:c9:08:8c:22:8c:6e:10:
df:62:cd:e8:dd:a8:ff:11:f7:4a:99:b4:a9:99:6c:32:52:b0:
df:67:2e:b5:50:19:53:9c:23:23:11:c6:f0:e7:6b:58:e9:c0:
29:b2:7c:5d:72:77:a2:0e:ac:c9:62:ec:8f:7f:44:1a:e7:37:
d2:70:5e:c8:1b:02:19:d0:97:17:7d:ea:05:56:81:74:a8:37:
19:a8:1b:7f:30:f7:f2:7e:86:fb:95:0d:fc:c3:89:2a:8d:36:
99:41:77:b0:cb:93:fd:6f:f5:33:d9:5d:d5:04:eb:34:c6:28:
de:80:d3:2d:7e:3d:17:0d:1a:b8:5e:09:10:14:19:32:c5:0f:
b6:97:93:e3:8c:e2:25:d5:3c:ff:fe:0f:f0:91:29:14:04:6c:
f1:25:19:2b:6e:48:69:62:89:53:02:fb:8d:62:a5:fd:8f:6b:
e4:b0:23:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:34 2025 by rpki-client