Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1389a69c-248a-3f01-a14a-39c9b844f1a8.roa
File: 1389a69c-248a-3f01-a14a-39c9b844f1a8.roa (raw, json)
Hash identifier: QKYBoBRR1r/7rlcCirolYDvfWO3IfmcAo0SpVnWSVLI=
Subject key identifier: 12:08:7C:3E:D8:F8:96:D7:2B:71:2B:4D:24:25:67:F8:D2:E2:A2:09
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403525A711650BC24C2F007D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1389a69c-248a-3f01-a14a-39c9b844f1a8.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:25:a7:11:65:0b:c2:4c:2f:00:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=9c434ccd-874b-421a-b86e-f8919c63306d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:52:d8:aa:e0:9b:38:41:65:08:5b:2c:c4:62:
50:26:0b:a6:7c:8b:78:88:94:4f:cc:c8:84:9a:1d:
6b:1c:e7:f1:1c:ca:a9:93:34:30:59:91:52:91:30:
1b:60:0b:86:fb:2e:97:41:72:03:85:3d:9f:f7:95:
61:f8:18:ae:1e:c9:0a:01:de:b6:42:00:7e:6a:28:
21:b2:cb:62:e2:f3:a7:42:8e:1f:14:55:27:2d:54:
f9:c9:1a:8a:71:29:90:e3:11:8f:d9:2a:c3:8f:2e:
18:3f:f0:8b:bf:1d:0a:db:f9:00:ac:16:0f:a6:08:
73:14:33:92:b6:11:7d:06:41:07:75:d3:9d:e3:57:
e6:cb:0c:67:05:67:50:52:bf:cd:37:5f:8f:04:b4:
13:b6:20:d2:8c:ce:10:c0:37:85:81:5c:e0:3b:24:
7b:84:5e:7d:9b:2e:12:bb:dd:b0:39:0d:12:4f:46:
53:84:b0:99:ee:4c:61:9b:c1:10:be:e8:3d:90:8f:
28:63:36:77:82:60:4b:da:22:4d:ca:44:b1:f2:87:
40:58:92:aa:c3:f6:2a:08:b5:e2:ba:a1:3e:26:2f:
61:ad:83:c2:11:d2:9e:75:37:7b:3d:cd:b5:b3:c9:
9f:01:d4:d7:20:29:04:f4:62:76:f8:89:43:ab:8f:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:08:7C:3E:D8:F8:96:D7:2B:71:2B:4D:24:25:67:F8:D2:E2:A2:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1389a69c-248a-3f01-a14a-39c9b844f1a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.234.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:e6:e6:47:96:b7:2c:b9:36:ba:d1:0b:3a:ba:bf:a0:95:10:
00:4d:4a:60:71:20:6a:f1:07:a1:ab:b5:4a:d5:83:fc:a2:ce:
11:0e:ab:8b:5b:8c:ea:c9:bd:71:0f:aa:82:81:5c:4f:cb:9d:
0e:ae:d3:b3:70:26:a7:f4:21:ac:77:23:bf:5b:1c:bb:f0:8e:
80:97:14:74:5b:06:b7:70:1d:79:b9:05:be:51:73:82:e2:06:
c5:3f:1b:e4:c2:92:af:b0:1c:bc:da:3b:5a:3e:8b:f4:41:f6:
b0:48:ee:32:e5:d7:4c:39:13:13:77:95:5d:11:a0:c5:26:67:
be:16:98:98:ea:a0:6f:96:71:13:c4:64:f1:d7:e5:39:19:ad:
97:83:f0:71:b8:e7:d8:60:e8:c4:72:38:d2:b4:c9:0f:59:f5:
b5:a5:f9:2a:57:4a:29:cb:8e:27:2f:4a:a8:ae:74:9b:93:61:
87:d0:24:54:5b:96:65:b8:82:ee:25:b6:cd:0b:e3:28:8b:bf:
46:a8:73:18:fa:c4:24:e5:36:e9:ba:b7:5d:d8:1d:21:87:ff:
a6:0c:8b:8d:06:67:33:91:f7:52:ef:29:c4:5d:b8:24:18:fa:
90:f2:ba:af:6b:c7:8c:92:5d:86:b3:64:92:ea:62:44:dd:db:
22:95:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:34 2025 by rpki-client