Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cab6f83-6bc8-3a46-9295-7208b9007146.roa
File: 1cab6f83-6bc8-3a46-9295-7208b9007146.roa (raw, json)
Hash identifier: MrShR+ohgU+8mIBrXQgaCkWDw+1bA+BXIRyMe7ft5a4=
Subject key identifier: 4A:A8:66:FE:49:31:37:F7:FE:0A:E1:8F:BD:90:C6:1A:5F:D2:34:BB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584024A11117E82274F5553DA630
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cab6f83-6bc8-3a46-9295-7208b9007146.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:a1:11:17:e8:22:74:f5:55:3d:a6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=d8a76bf9-515b-4c9e-82d3-dd356d720920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:d4:e3:a9:16:90:4e:0f:53:ae:62:42:c0:
70:a9:9f:5d:b6:1e:a3:26:5f:6d:51:1b:ff:35:7f:
eb:3c:47:00:6e:01:63:71:2f:4a:e8:22:dd:10:a2:
25:2f:6b:64:d3:b0:a6:bd:b0:bd:9d:50:f2:57:f5:
4d:9b:17:d3:7c:53:e6:ba:e8:a5:8d:7b:35:98:1c:
97:92:4f:bb:ef:25:19:1a:40:51:0b:1a:52:dd:36:
bf:8f:10:bc:01:b6:72:f0:41:3b:8f:e9:a0:87:37:
ef:75:85:ea:bf:45:ca:66:e1:97:c8:32:53:4e:b6:
26:c0:ed:7e:b7:4b:f3:18:3c:dc:7f:c1:5d:cc:aa:
f4:82:f8:c9:30:69:02:bb:04:20:bc:3c:90:5d:e7:
ef:8d:3d:8a:eb:df:6c:02:d8:10:46:51:93:d0:f4:
73:ae:5f:3f:de:1e:ad:1c:0e:1a:58:55:69:c9:58:
c7:80:72:25:77:50:59:7a:f5:d1:14:72:df:b3:73:
d2:b3:af:99:fe:81:29:a8:b0:96:24:80:91:6c:0c:
27:95:d4:87:21:64:3b:a1:b2:84:ba:ca:b4:8c:b5:
f6:d2:8a:27:31:b2:ed:f5:ee:33:3d:85:1e:85:4d:
33:f1:c0:3e:d2:23:9b:06:50:49:7b:e5:9b:c7:73:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A8:66:FE:49:31:37:F7:FE:0A:E1:8F:BD:90:C6:1A:5F:D2:34:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1cab6f83-6bc8-3a46-9295-7208b9007146.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:96:24:97:cf:38:3a:01:9b:fa:4b:ac:b2:dd:f4:d2:e5:ff:
be:54:18:1d:5c:96:7c:38:44:5b:d2:86:c5:ce:f7:67:dc:e4:
0a:52:3a:ab:53:76:ff:15:72:52:1b:f7:48:ab:20:e7:4d:54:
47:23:df:5f:8e:26:00:70:c6:d2:9e:59:64:be:d0:b8:cb:f7:
4c:d1:b0:45:62:09:ad:e2:d7:4a:97:3f:99:80:a5:eb:05:4c:
3b:7b:78:0a:a7:95:9e:a8:e5:4b:27:7c:a1:f6:76:c0:b5:c7:
e4:f5:6e:a3:77:ec:86:e7:99:24:db:1a:34:fe:24:df:03:f7:
e2:59:33:8a:93:d2:84:0f:91:0b:ff:61:6f:46:49:17:20:2d:
ff:52:d6:d4:82:ca:3d:7d:b8:8c:76:f1:bb:06:06:9e:39:a8:
29:33:2e:bb:13:54:36:86:9d:26:39:34:86:f9:e2:e0:08:bb:
8e:93:e6:90:fc:66:f4:3c:25:b9:75:5e:ba:dc:fa:a1:a4:0d:
99:95:1d:c8:f5:5b:88:2b:4b:9b:c9:90:0c:de:ce:aa:7b:48:
d8:ed:68:e3:eb:40:36:4c:7b:c8:f1:4f:4c:e4:36:37:48:43:
45:11:0d:74:80:10:43:9e:bf:b1:cd:de:07:33:f7:b0:60:c0:
be:a6:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:31 2025 by rpki-client