Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1873a949-7eb0-3ee0-9d73-c30ff4ea2fbf.roa
File: 1873a949-7eb0-3ee0-9d73-c30ff4ea2fbf.roa (raw, json)
Hash identifier: 9hqr4I+Idas9QsqSSii+Q4dKcjuDc4DGhW0tS8h7Cks=
Subject key identifier: FA:F6:FA:23:D7:47:52:86:90:59:D9:B6:AE:58:CE:A3:AE:BF:5A:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405407AB671457708FAF6801A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1873a949-7eb0-3ee0-9d73-c30ff4ea2fbf.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.235.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:54:07:ab:67:14:57:70:8f:af:68:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=8e9982c8-7ad9-4a0d-96cb-1ac2457673cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:b4:b2:8c:b4:93:32:80:a6:74:25:ac:04:
45:60:27:24:03:de:8e:d6:25:d9:fa:6a:03:dc:0c:
40:57:c4:a2:0f:bd:82:29:91:42:16:b2:66:43:98:
8b:f5:dc:57:48:d7:6b:53:e2:0c:36:ff:1e:01:36:
b1:63:69:0d:b3:b5:5c:ee:76:4a:79:e4:fc:1a:32:
80:2d:77:cd:82:fb:66:ef:79:f8:83:f1:fe:5a:3d:
aa:59:34:a0:dc:ae:69:92:37:95:09:0b:c2:73:f9:
fa:8f:31:a9:3d:8d:8f:b2:ed:96:f9:03:de:83:b6:
d9:72:15:5f:44:8f:9a:ab:7a:e7:07:f8:dd:4e:8a:
15:d6:83:e6:df:c1:f7:37:a9:f5:77:fa:83:77:ac:
df:58:1c:f6:ef:95:91:88:4e:32:72:eb:7b:f9:e6:
87:46:17:51:fe:e9:8d:6a:52:e9:0d:49:c2:b7:a6:
5d:6e:84:84:63:2f:07:38:13:77:6c:91:06:01:8e:
2c:64:b0:74:d0:76:4d:9e:01:1d:6b:cf:fc:02:cd:
a0:67:b9:aa:6b:1d:94:d5:80:58:c1:0e:e1:dd:23:
83:af:55:2a:b4:0c:db:b0:41:c4:59:d6:65:cc:da:
11:8a:1b:d2:c7:35:c6:16:0d:c2:d4:54:e3:a5:92:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:FA:23:D7:47:52:86:90:59:D9:B6:AE:58:CE:A3:AE:BF:5A:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1873a949-7eb0-3ee0-9d73-c30ff4ea2fbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.235.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:be:e5:66:54:da:cb:de:38:7c:84:ec:68:32:8c:4f:9d:73:
1c:e2:d4:98:e7:4b:83:45:2c:0b:de:c2:68:f5:72:09:6b:f2:
fb:1d:bf:e1:43:c5:7a:28:2e:69:8c:e1:8d:fd:4e:fc:d2:d9:
44:df:51:47:b4:db:8d:9e:de:ce:23:5f:25:60:ea:77:9c:ae:
d4:1e:f5:a7:e2:8b:1b:9b:21:df:ee:11:0f:49:90:02:fb:95:
31:69:f2:84:15:af:03:88:17:c3:74:43:66:95:98:3d:dd:a2:
7a:e1:57:bb:1e:7d:67:a6:fd:6c:0b:62:8f:8c:fc:27:26:3c:
f2:bc:8e:4d:78:67:fe:31:a5:3e:b7:59:c5:90:d3:f7:ab:59:
f2:38:2a:7b:85:6b:2d:34:49:9c:68:35:08:c2:09:0e:f2:1c:
64:c6:ea:19:40:72:a1:ec:d5:6a:3c:e5:92:2e:b0:f2:e7:33:
91:37:ef:6d:52:57:f1:73:8c:a4:ee:7e:3a:12:a1:f3:4d:c3:
7a:cb:c9:83:94:ca:12:43:07:0c:15:5f:06:88:ac:27:a7:9c:
11:63:cf:bb:94:06:9f:8f:5e:11:f3:ec:f8:ca:88:f8:51:0b:
00:3f:71:4a:4f:20:57:ea:0b:35:5f:20:38:22:34:77:f1:2c:
c1:5b:5a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:48 2025 by rpki-client