Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b24d451-af8e-3042-ab52-940d36a21fec.roa
File: 1b24d451-af8e-3042-ab52-940d36a21fec.roa (raw, json)
Hash identifier: 3uVhfrji07/PGsb75gabJlR/KAR7YZGgcbszuDAdwzg=
Subject key identifier: 76:F1:FA:A6:36:E2:8B:D3:76:B9:29:37:39:AC:4D:5E:CB:22:BE:02
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB869F851F5167C9181332000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b24d451-af8e-3042-ab52-940d36a21fec.roa
Signing time: Thu 27 Oct 2022 21:18:08 +0000
ROA not before: Thu 27 Oct 2022 21:18:08 +0000
ROA not after: Fri 02 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.216.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b8:69:f8:51:f5:16:7c:91:81:33:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 27 21:18:08 2022 GMT
Not After : Dec 2 05:00:00 2022 GMT
Subject: CN=dbc94927-c0b4-4197-957e-637f08397a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:4f:94:57:a6:30:aa:e5:a0:cc:a6:8e:2a:
20:d6:93:f2:da:1e:88:b1:d9:7f:50:43:f7:21:9d:
cd:68:e8:bd:32:86:8a:5b:d4:2a:43:a4:fe:56:9a:
ef:17:b7:7b:55:15:ae:a1:40:a7:35:b1:92:e7:02:
ca:a0:0d:e5:73:cc:43:9a:9d:35:21:f8:b2:51:89:
77:80:a0:0c:5a:0e:a7:5b:f2:f5:4e:b1:89:b9:6e:
fd:6c:ec:9a:d1:15:65:46:35:8c:73:61:13:8b:7f:
45:73:ca:47:f4:76:ac:f1:81:64:3f:26:8f:5c:7a:
8b:c5:e8:f0:7c:ae:19:bf:79:2c:48:a7:f0:93:94:
b0:a0:e6:b4:26:7a:e9:dc:22:e6:5f:bd:c8:11:b8:
2f:b0:76:6d:d9:b0:10:cf:07:9a:9d:5d:0f:cb:1e:
fe:2f:89:a7:82:35:68:cd:77:6c:53:68:23:d7:91:
86:03:51:a6:e1:bd:27:1e:35:37:54:dc:05:4d:4d:
3c:91:48:b2:35:7f:e8:0a:25:81:f0:8b:77:fa:a1:
f0:32:df:cb:78:b2:e9:fc:0a:d3:a8:88:4c:ca:b9:
f7:b1:c7:da:a7:0d:c7:b8:ae:df:eb:85:f0:79:77:
32:22:fa:6a:e0:52:39:e9:d3:b6:cf:4c:e3:5c:15:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F1:FA:A6:36:E2:8B:D3:76:B9:29:37:39:AC:4D:5E:CB:22:BE:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b24d451-af8e-3042-ab52-940d36a21fec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.216.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:c2:1e:af:f3:28:1c:d0:49:3a:af:d9:41:08:66:98:30:4a:
3f:57:e8:93:43:63:be:30:f9:f9:c9:f8:62:69:56:08:86:46:
34:18:56:0b:2e:54:26:5a:da:00:d8:0a:5b:21:1e:ae:43:9d:
77:1b:e0:2c:18:9c:d4:d1:8a:9a:ba:51:74:15:a1:91:e1:b1:
e2:da:46:da:c1:0c:df:90:f1:b5:16:0c:5f:8c:d2:a2:5d:eb:
f4:b9:68:b9:9b:de:95:d6:e8:dd:ef:f1:21:c5:b4:24:7c:94:
04:1f:4e:cb:02:d8:e2:c4:04:6a:d0:7e:db:41:59:71:94:5e:
e9:56:db:b1:82:17:c5:ce:8a:32:2f:b7:44:11:c2:0f:1e:e3:
ed:4f:4f:22:ba:25:05:41:61:f2:9b:69:bd:44:8d:1b:b0:51:
4a:f5:f6:30:8c:b5:c5:1c:0e:df:f1:84:ca:ca:1c:aa:a8:76:
bd:a4:87:01:41:58:ac:a7:4d:04:25:50:bf:13:79:b3:cd:71:
a6:ab:83:94:77:ea:70:ce:7b:37:f5:d6:9a:6c:f4:b8:38:ce:
d4:8b:1e:93:95:3e:78:c6:37:2a:2c:4e:8c:79:e1:90:d8:67:
42:00:ab:35:6f:4a:e3:68:39:72:3f:0e:1c:46:03:6a:19:c8:
e0:97:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:44 2025 by rpki-client