Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b8ddeac-dd8d-317e-b597-b7b03f5f5b52.roa
File: 1b8ddeac-dd8d-317e-b597-b7b03f5f5b52.roa (raw, json)
Hash identifier: /4OXIZ6cDhflyUlTq6K6tiFuUZO30++vqlF8d7WQgQM=
Subject key identifier: 1C:D0:04:BD:C2:1C:1A:F9:FF:14:26:24:9B:79:A0:64:A5:5A:3D:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E056774B1B4FBDC7CF7F3B600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b8ddeac-dd8d-317e-b597-b7b03f5f5b52.roa
Signing time: Tue 24 May 2022 15:27:07 +0000
ROA not before: Tue 24 May 2022 15:27:07 +0000
ROA not after: Wed 29 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:05:67:74:b1:b4:fb:dc:7c:f7:f3:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 24 15:27:07 2022 GMT
Not After : Jun 29 04:00:00 2022 GMT
Subject: CN=9cc78176-f88f-4977-be6b-91488d7cdc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:29:da:e1:11:60:97:b1:1e:b0:3c:17:e7:
13:90:06:5d:05:e4:93:20:6a:de:ff:09:d7:fc:95:
a4:0e:bf:7f:78:9a:4f:e0:74:66:ec:fa:74:5d:77:
a6:23:c1:c8:ea:d9:f6:fc:e9:bc:d7:45:51:df:52:
a7:80:40:d5:ac:d1:f3:d6:9a:52:5d:0b:9f:d4:7d:
5a:cb:d5:4b:a8:7c:3c:96:c8:5f:bb:25:98:14:23:
e4:75:cc:33:d2:f3:ea:ae:62:32:e3:6e:bc:33:59:
83:07:6a:96:0b:ed:a8:51:2d:20:61:00:cf:7f:93:
29:88:78:db:13:7a:5b:42:9f:ec:d7:db:42:83:ae:
88:66:0a:c8:32:e9:ee:1d:1f:bf:78:38:15:45:1f:
e0:14:4d:c8:fc:6b:13:4f:66:41:fb:7e:1d:80:9c:
c1:6d:9f:38:58:7a:66:de:53:89:9b:b0:56:82:79:
0c:94:9b:9b:c2:5c:b1:d6:fc:f6:80:da:7b:14:83:
3e:41:27:ac:7c:67:74:b6:96:a9:a9:e0:bd:65:b4:
68:8f:04:59:69:e5:a4:99:15:71:57:9b:83:3b:e4:
8a:0d:ba:56:ce:49:94:ac:39:17:09:3c:12:44:ec:
c1:c9:52:7c:5d:79:e9:b7:0e:d4:27:bc:bb:ab:99:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:04:BD:C2:1C:1A:F9:FF:14:26:24:9B:79:A0:64:A5:5A:3D:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b8ddeac-dd8d-317e-b597-b7b03f5f5b52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:8c:f4:b1:eb:d8:34:9e:7f:d8:d1:cf:1f:94:56:76:63:ac:
30:17:13:2c:24:81:8a:86:e4:dd:40:ee:2e:30:79:9d:27:86:
2f:4d:d8:86:23:77:39:84:da:bb:6c:89:9b:24:c1:38:d7:dc:
c9:fa:d3:7c:4e:1a:0e:63:29:3a:08:ab:e3:4c:63:05:21:66:
23:05:23:ce:97:5d:55:44:b1:c7:25:9c:f3:08:eb:81:95:f3:
0a:8a:2c:f7:43:39:0c:f2:f6:27:77:68:22:94:7d:10:a7:95:
e1:55:ba:03:72:96:6e:fc:c5:09:cb:f1:b7:e2:22:fa:56:ea:
45:9a:03:95:c7:fc:d8:d0:03:09:e7:d9:00:42:f2:c2:ae:32:
83:cb:f9:6f:f7:fd:af:23:6b:9b:f3:20:32:51:ef:c3:4c:1f:
83:76:32:c5:63:9b:1d:21:e7:b9:5d:5a:ea:34:01:17:69:07:
56:50:a4:8c:1c:50:21:47:f4:fc:be:d0:6d:59:dc:f7:96:40:
ed:a6:b6:03:0d:df:94:0b:90:17:f5:92:a0:49:48:fc:87:74:
a3:dc:89:ed:e0:a4:55:71:4c:ad:1e:11:c8:13:e8:39:73:c5:
2a:5d:fd:f9:71:52:5c:e1:24:aa:9b:4f:a9:f9:7a:29:a4:75:
ed:6b:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:27 2025 by rpki-client