Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d23eeb2-d5ae-3f65-b2d6-c12bba930bdd.roa
File: 0d23eeb2-d5ae-3f65-b2d6-c12bba930bdd.roa (raw, json)
Hash identifier: dDKmzCjXyXIDDaj57ksX6lMNwhLAxS+4WHLOcWS+mZo=
Subject key identifier: E7:1F:3B:F1:A3:88:02:45:F3:D9:A5:E8:2F:16:FD:34:35:80:61:91
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F1240E28C8772A403A745B080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d23eeb2-d5ae-3f65-b2d6-c12bba930bdd.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:12:40:e2:8c:87:72:a4:03:a7:45:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=05ca0dff-7101-4753-9f65-c770e09a9ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:64:57:cb:02:15:e9:e2:b5:88:54:63:b5:
29:68:d0:27:76:4e:b2:99:29:23:54:ad:7c:7c:0a:
ac:d3:e8:ce:2c:b5:e5:f6:94:fa:89:5e:1a:a8:a0:
57:a4:f7:94:af:1f:2f:69:61:eb:48:90:8c:67:ae:
b3:f1:15:b1:b1:5b:58:ff:c1:e0:59:a5:b1:a1:41:
68:fe:b8:b5:56:18:be:cb:f8:82:d0:37:9a:d8:53:
f5:4a:03:b3:66:2e:e4:32:ab:fb:46:5b:1e:6a:30:
18:fc:52:63:a8:99:f1:a9:eb:d7:23:98:d7:f0:70:
14:83:fd:ed:02:86:a2:f7:33:92:12:3f:ca:1b:a6:
e3:3d:0b:7d:e6:6f:57:75:ac:65:90:50:35:2b:b9:
cd:00:5b:b2:ee:03:19:13:47:93:48:74:5c:ff:bd:
a3:c0:db:1f:83:75:09:95:ea:bb:b0:5d:df:f9:7f:
da:ba:29:4c:c5:d2:51:1d:d1:ca:e5:12:f5:6b:56:
f5:3a:15:cf:0a:7a:9f:01:cb:5c:64:c0:54:69:d6:
d7:d4:7a:fc:ac:cc:bc:76:a5:21:6e:27:30:dc:cd:
5f:66:10:5d:fc:21:d3:73:c9:1a:94:8c:e3:b5:63:
02:9e:45:bc:e8:fd:4c:be:d2:23:d6:00:cf:b1:3a:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:3B:F1:A3:88:02:45:F3:D9:A5:E8:2F:16:FD:34:35:80:61:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d23eeb2-d5ae-3f65-b2d6-c12bba930bdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:bc:37:f4:b4:b1:c3:a9:be:04:09:16:67:63:eb:55:8d:b6:
13:36:3a:2f:fe:b1:8c:5c:ca:85:8c:fa:6b:3f:ad:b9:96:7a:
72:81:f9:b9:39:62:26:ac:0f:39:f8:a3:a0:08:52:fe:7f:50:
35:f2:00:24:e1:6b:c5:59:5a:87:ac:e1:1c:76:af:5e:04:94:
c7:9a:45:a5:a9:9f:9d:26:2a:b7:08:82:64:90:38:08:6a:4e:
b7:75:49:cf:13:81:4b:9c:71:90:0b:3c:d0:6a:81:04:2c:6f:
f5:06:28:a2:fb:17:0c:7f:2e:7a:e8:f8:73:aa:0e:e5:af:92:
68:ec:64:95:31:37:14:46:65:e3:8c:d7:36:26:3c:91:35:38:
ac:7d:84:16:6f:91:91:87:48:ab:00:2a:04:21:b3:0c:0b:ff:
d1:ea:cc:a8:4e:22:80:af:2b:a8:68:36:78:12:53:74:38:6c:
6f:1a:c0:40:5a:8f:c0:dc:18:ea:3b:89:9f:e5:86:af:6c:b2:
ff:ac:7d:d7:eb:fb:c5:af:1d:ed:b6:00:97:19:71:c5:3e:64:
04:a0:b9:28:7e:e3:0c:e1:dd:da:ea:4c:ba:41:3e:a2:7f:0d:
e0:e3:38:f3:82:f7:c9:58:e3:11:11:74:59:af:60:65:2b:22:
8f:1f:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:19:48 2025 by rpki-client