Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f035cfb-16d1-3837-b2a8-f752e5d9b198.roa
File: 0f035cfb-16d1-3837-b2a8-f752e5d9b198.roa (raw, json)
Hash identifier: u+p7pDk4HyOwUqqaLStGmm6Ubo6D3zBO7jaf+MIpldU=
Subject key identifier: 4A:0F:EF:97:A3:F1:69:F1:2C:33:C9:E9:E7:00:E6:93:C4:5C:4D:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFD41117AACFAA72A617FC940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f035cfb-16d1-3837-b2a8-f752e5d9b198.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:41:11:7a:ac:fa:a7:2a:61:7f:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=f571fcd9-b0a0-47dd-891f-7bf04e2602ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:e0:2a:a2:dd:4c:76:85:da:ec:70:3f:84:
ed:e0:7b:af:fd:29:d9:30:d7:23:7f:3d:ef:cc:65:
b0:11:d1:8c:3b:a4:59:6c:52:15:01:23:79:b2:30:
25:90:06:6f:a8:54:db:8c:dc:a5:5d:41:8c:1b:a5:
46:93:17:fb:c5:03:30:cf:94:fb:fb:29:f8:9d:6c:
f5:0d:8d:0a:24:a9:b9:e0:b6:cd:1f:42:b3:71:44:
27:5d:ff:14:89:43:10:f2:af:6d:4b:36:26:cc:29:
70:5a:ec:e3:9a:8f:82:50:29:a1:a4:a5:89:2b:d8:
dc:52:6b:2e:d9:f5:dd:eb:be:0a:3d:23:03:61:29:
9c:e3:37:2f:69:6e:23:64:a8:fd:43:cd:b8:4b:bc:
df:9f:67:40:d5:77:e4:b6:e1:0a:06:9c:1a:8f:09:
a4:f7:d2:4b:02:9d:c7:78:4a:2b:40:74:4b:65:56:
5c:5d:bd:a9:eb:e4:0c:a8:dd:0f:57:46:a1:41:13:
e9:39:7f:3a:97:4f:77:4e:fe:74:f2:79:23:06:06:
c9:c8:bd:1d:0f:95:f7:72:a7:27:83:a1:85:2e:e4:
96:c4:53:2a:99:ca:27:97:6c:6d:29:b5:2f:68:9b:
c5:95:e9:c9:52:09:e9:f5:9d:94:c5:8c:9e:5f:e7:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0F:EF:97:A3:F1:69:F1:2C:33:C9:E9:E7:00:E6:93:C4:5C:4D:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f035cfb-16d1-3837-b2a8-f752e5d9b198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:6a:26:c0:cb:a3:8b:69:2e:04:50:19:22:8f:48:a4:2b:69:
39:75:6a:ce:94:e9:43:9c:45:16:1f:b8:d3:25:a4:b3:a6:37:
c6:72:59:e8:ac:78:f8:c6:e7:7a:ec:a0:be:4d:e8:c5:c8:fe:
d0:71:42:79:24:0d:a0:5c:57:31:52:0f:29:6e:0f:ad:45:d3:
d9:a4:f8:68:16:92:43:bb:69:b0:1f:c2:01:7a:85:48:6e:5c:
99:73:24:0f:3a:c5:5a:2a:94:a4:5f:94:b0:c3:c5:61:1f:47:
50:9b:b5:7d:4d:d4:00:28:4e:e2:c7:ce:a4:e9:5e:6e:68:81:
5b:66:bb:e1:74:90:dd:dd:79:86:13:a8:b3:6e:c2:87:d5:f9:
0c:29:56:78:34:ad:4d:35:29:eb:6c:48:72:20:47:a9:97:bf:
33:db:87:1e:0d:54:6b:99:a4:03:b1:5d:80:68:53:2a:17:d7:
4b:99:e8:cb:32:8b:03:b2:76:5c:38:43:3d:6b:81:f3:d9:da:
2d:49:a4:d3:ac:a3:42:a7:0f:68:ba:1c:6a:0a:38:2f:dc:7f:
72:5f:ac:94:a2:72:91:02:d4:01:70:76:be:ce:ca:37:3a:84:
28:76:dd:5f:fa:28:38:de:ec:8a:10:63:03:f2:d5:1c:1c:f9:
03:f4:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:47 2025 by rpki-client