Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d95746e-a642-3bb6-927e-82f86d0f60d2.roa
File: 0d95746e-a642-3bb6-927e-82f86d0f60d2.roa (raw, json)
Hash identifier: ppYHaoqqDbLOHmipxzTgrgLl2RetZ87ED5VMjD2VVm0=
Subject key identifier: AB:D1:09:F3:5B:3B:D1:40:8E:8A:F8:77:19:C5:9B:46:C7:2E:55:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E0075E5D46314382D7DA26880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d95746e-a642-3bb6-927e-82f86d0f60d2.roa
Signing time: Mon 23 May 2022 12:00:00 +0000
ROA not before: Mon 23 May 2022 12:00:00 +0000
ROA not after: Tue 28 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:00:75:e5:d4:63:14:38:2d:7d:a2:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 23 12:00:00 2022 GMT
Not After : Jun 28 04:00:00 2022 GMT
Subject: CN=7ca8c5b8-ff40-454d-ab11-e029173f8744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:c8:fc:d1:4c:2e:21:59:72:f7:ae:7f:64:
bc:be:9f:58:51:99:ca:94:32:d3:24:86:27:b0:bf:
c7:23:c1:da:33:2e:47:2a:8a:21:82:a4:6c:4f:1c:
8a:1a:a5:7f:67:49:8f:c5:9c:df:8f:cc:26:9f:d9:
3e:53:02:3b:56:13:c6:3c:d8:91:36:06:d2:90:89:
57:f1:b2:f1:86:c1:d6:99:a5:08:c9:3b:77:d4:c1:
a2:4c:85:f3:39:a5:45:d8:72:18:da:41:3b:07:09:
82:9b:7c:8d:52:f2:ae:03:3a:89:f3:ae:57:99:88:
15:5d:d8:c9:a2:55:37:2d:cc:cb:fa:f0:0e:65:b1:
2c:29:c7:77:00:35:92:6f:2b:d4:a0:58:80:06:f1:
5a:c0:05:eb:28:51:6d:19:f3:73:2e:e1:92:24:58:
c5:48:fb:ea:e8:23:2d:e3:87:72:05:96:a8:24:e4:
99:8d:26:79:60:fe:57:ae:d6:1d:13:61:d7:0f:04:
f1:44:d5:41:5b:ba:e7:d5:a4:2f:69:ef:50:f0:ef:
d4:c0:e1:b9:d7:c8:cd:0c:c8:14:af:cd:b3:fb:16:
47:ab:30:c9:8f:51:1a:74:71:28:74:b8:58:8d:0e:
3c:94:15:66:34:ca:6a:64:f7:f4:fe:e1:6d:87:ee:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D1:09:F3:5B:3B:D1:40:8E:8A:F8:77:19:C5:9B:46:C7:2E:55:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0d95746e-a642-3bb6-927e-82f86d0f60d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:09:23:62:b8:93:fd:2c:c0:5e:0e:6a:41:a8:83:f9:ae:8b:
a7:b6:e4:6e:b0:b6:20:fc:f6:75:57:d8:af:8a:ef:8f:83:6e:
35:40:cc:2d:b6:9c:2c:ec:be:d5:50:9c:a8:00:6f:38:f5:9b:
80:1b:b2:4f:7c:e2:b8:43:71:95:ed:af:f9:0a:50:d5:9b:2c:
39:40:e8:0a:d1:e8:f9:e9:08:db:71:11:d3:af:8b:e9:c8:89:
30:dc:88:3e:1b:06:08:0b:de:b1:e7:d1:b7:4d:37:93:be:65:
f6:a9:ae:ef:07:a1:5f:2b:42:45:13:e4:f6:bf:cc:5e:c9:5b:
07:c0:64:ca:a3:53:0b:c7:55:73:9c:41:36:1b:32:66:72:24:
c3:b1:80:58:e7:24:4b:d3:c4:4f:78:2d:58:20:39:00:93:ef:
75:87:29:61:50:8f:da:e6:17:fe:a1:a9:c3:77:04:ad:7f:38:
4b:e2:2e:f3:e8:36:a0:30:e3:c2:36:36:53:68:86:fe:ec:81:
c2:50:fb:0b:ba:7f:3d:bc:f7:56:9b:5a:6e:d1:71:b5:de:4b:
4e:1b:17:59:db:2b:4f:25:ad:8a:4c:8c:a6:39:57:8c:c0:17:
7e:1f:a7:40:f6:ad:65:be:e7:33:b3:f2:ea:c6:c8:47:d5:16:
06:77:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:51 2025 by rpki-client