Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1af8b79d-af84-34cd-9103-28063ec9ad8c.roa
File: 1af8b79d-af84-34cd-9103-28063ec9ad8c.roa (raw, json)
Hash identifier: KEIFItC6wxPeVlLI+cDP3k1ZmvaM+VmtGwgi2Kqc+uc=
Subject key identifier: 5E:AE:FB:8C:D3:17:1B:8A:AA:2D:61:39:BE:0F:0F:91:B2:95:A5:00
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F988C4AEF490E496AFBCB6400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1af8b79d-af84-34cd-9103-28063ec9ad8c.roa
Signing time: Sun 16 Oct 2022 12:00:00 +0000
ROA not before: Sun 16 Oct 2022 12:00:00 +0000
ROA not after: Mon 21 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:98:8c:4a:ef:49:0e:49:6a:fb:cb:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 16 12:00:00 2022 GMT
Not After : Nov 21 05:00:00 2022 GMT
Subject: CN=d8e844fa-24eb-4aab-8557-94d92b900238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:58:9c:3e:68:44:a8:d4:9b:85:0b:50:13:
10:50:56:5e:79:c1:f7:de:c9:1e:ae:88:81:f6:68:
f3:e6:9f:6b:35:df:59:9c:f6:e5:d5:a2:88:79:66:
85:9f:6a:a7:e1:54:7d:be:89:6f:72:6d:f7:20:3e:
b0:5a:73:71:73:b1:c0:5c:83:ee:ca:62:25:d5:69:
a8:9b:9d:a2:42:54:e2:c9:34:8f:6b:0c:c1:47:c7:
48:c4:97:09:6d:1a:f7:05:04:7e:68:23:98:3a:31:
df:03:36:da:a1:9b:68:2e:b7:3e:e7:46:5b:53:d3:
21:ee:39:94:79:9c:be:46:b7:d5:3a:2e:93:94:9c:
5f:30:b3:f9:7f:38:d7:2b:a2:ea:c5:b8:42:eb:17:
0c:8c:57:9b:60:52:b7:e0:71:b7:0a:fe:26:46:25:
b3:da:c5:b2:b6:8e:e1:10:b3:65:5f:a2:ac:92:a9:
e5:e6:57:7a:3c:52:1b:ea:60:06:2e:07:63:e6:7f:
05:62:1b:e3:bd:ba:98:ff:1f:04:41:17:f1:23:e9:
fb:4d:4c:f9:af:93:02:15:08:ae:bd:5c:a2:d9:d5:
94:b8:67:47:96:66:bd:f1:2d:0a:03:ac:00:36:8a:
84:c7:2a:85:f0:03:0c:0d:9f:61:55:b4:d8:07:b1:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AE:FB:8C:D3:17:1B:8A:AA:2D:61:39:BE:0F:0F:91:B2:95:A5:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1af8b79d-af84-34cd-9103-28063ec9ad8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:f3:70:2e:7c:82:f4:6b:45:a7:cb:d6:ce:f7:dd:ed:b4:65:
88:ac:85:ea:f6:34:0b:24:73:0b:03:56:e5:6c:16:38:e4:d7:
56:03:3a:41:47:13:17:c6:33:28:a5:a5:3b:02:4a:c9:ef:74:
78:58:32:86:e2:be:bb:af:a7:68:43:eb:e9:4c:18:84:97:24:
5a:52:18:91:7c:9d:ee:2c:c7:c5:bc:24:f5:2f:bf:d3:30:2e:
56:44:48:f0:45:78:2a:f5:5e:66:8e:6b:42:52:4c:5b:36:d5:
5f:a1:2b:02:f7:65:3d:a1:99:b4:e9:36:20:d2:8a:ed:b9:93:
38:b4:ac:44:9b:2a:95:d2:19:b7:4c:d1:17:52:42:ff:6b:16:
08:60:27:29:a1:55:4d:4f:a8:81:0a:88:d4:c4:8e:be:15:aa:
32:95:88:07:9b:59:dc:4a:9c:54:8c:20:ab:25:d0:58:4d:05:
00:a7:ec:d8:d8:f6:f9:6f:7d:67:cb:20:1e:60:8e:8f:45:a0:
26:40:c0:73:bc:fb:bb:69:e3:f5:27:98:69:ce:56:8f:1a:9b:
30:8e:85:45:5d:e0:5f:a8:02:e0:37:bc:f2:3a:e6:eb:fb:9d:
f3:c0:56:9b:66:40:2f:c3:79:3e:9c:4c:cf:08:2a:a5:48:46:
7d:cc:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:58 2025 by rpki-client