Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/127a089c-710e-389a-a761-968611605c6c.roa
File: 127a089c-710e-389a-a761-968611605c6c.roa (raw, json)
Hash identifier: m+RyupV5XhT5a2cKc4gQ4f2O6QsCYG6Pdnz3guXJExo=
Subject key identifier: 3A:D6:A1:6D:A7:85:53:2C:07:13:2A:A9:AE:3B:09:8F:B6:96:B2:45
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400E1EBCA853AA7CA098642C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/127a089c-710e-389a-a761-968611605c6c.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0e:1e:bc:a8:53:aa:7c:a0:98:64:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=906cbcf7-5ccc-4132-9fc4-25ec6a2cc397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:d5:53:e3:1e:9a:74:65:9c:71:d3:4e:ff:
13:b6:1d:1d:ea:11:38:fb:a6:76:86:d6:14:97:65:
30:20:71:38:fe:ad:78:c1:b2:f6:b5:27:6b:f3:f6:
b9:ec:8d:ff:b8:bf:26:58:ef:19:ab:b9:af:a6:4f:
4f:da:78:62:95:c9:c3:97:88:2a:1b:b0:ba:06:91:
00:9b:05:4c:28:93:81:e5:eb:9e:bd:ed:11:cd:1a:
7b:af:29:0f:46:21:84:4e:8f:33:e8:37:30:36:6c:
9a:62:eb:11:9b:ca:41:d8:83:19:59:48:c6:de:0f:
2d:13:0f:26:42:9b:60:b5:ba:1d:99:9b:81:2d:88:
07:73:16:e9:fd:3c:5e:e9:94:7e:c7:af:66:be:2c:
4d:58:5a:de:a2:86:81:af:fe:b0:e7:9d:66:10:21:
19:c7:ce:a6:fa:ec:a5:c9:4a:f8:29:27:59:68:70:
b3:a1:2b:8f:ad:3d:cc:1b:7d:24:77:06:71:bc:17:
53:d8:35:ad:c1:63:65:d5:28:b8:aa:e6:3b:ea:62:
6f:26:47:bc:98:37:1c:b6:bc:67:7b:4c:7d:1d:0e:
58:de:82:d5:a8:e8:0c:61:56:6b:c4:88:de:9f:f8:
a7:02:d2:5f:62:d4:b2:e0:a7:6b:7a:17:b8:3c:87:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:A1:6D:A7:85:53:2C:07:13:2A:A9:AE:3B:09:8F:B6:96:B2:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/127a089c-710e-389a-a761-968611605c6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:4b:78:c2:b6:17:27:43:89:6f:8a:c7:74:91:7a:75:2a:c5:
2e:9c:81:47:1c:1a:08:7f:2c:a9:ef:2a:d2:dc:3e:9e:90:c3:
b7:2f:c2:42:34:03:d5:1d:f9:91:5d:87:c5:7b:51:a5:4e:39:
26:af:28:fc:d7:f4:12:0f:e6:fc:32:76:d4:d3:cd:f2:a8:17:
bf:13:5d:ca:b6:ab:a6:ca:24:fb:0b:1b:56:1b:16:c6:b3:62:
7d:f5:a6:28:30:44:15:1b:20:9d:64:c6:db:ae:d3:72:73:cf:
f4:23:63:12:f2:56:8d:92:9a:6e:57:d6:ec:28:c6:f0:49:34:
1e:51:a8:a2:8e:52:b2:d2:24:85:66:9f:92:bc:06:21:95:1e:
76:c5:e2:c9:c7:3a:d3:ec:77:f1:63:00:ca:dd:de:d4:c9:13:
86:cb:dd:44:39:f3:06:6c:59:68:5b:c8:05:93:0e:a5:f5:72:
ec:f0:5f:67:3f:e3:61:5e:47:2f:36:f7:5a:30:24:ec:5b:c6:
b9:f6:9f:4b:7a:8a:13:a1:74:de:80:07:18:a3:9f:56:85:4b:
95:d9:70:81:b9:8c:c3:7f:94:3f:08:cb:5d:22:5b:13:c2:a1:
d9:fe:7a:12:44:82:2e:85:16:18:cc:46:05:fe:61:9e:f3:92:
37:e2:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:57 2025 by rpki-client