Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d64e5d2-c8cc-33db-a467-4e5f7e7d8336.roa
File: 1d64e5d2-c8cc-33db-a467-4e5f7e7d8336.roa (raw, json)
Hash identifier: fxKnW+7N5VclkpRVBJ2m0mN26XWh10+63HSg7jbeUFY=
Subject key identifier: A5:D7:B7:11:E0:86:85:23:1A:0C:F1:C1:05:1D:7F:91:98:CE:7E:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858407ADA7BFE758D47578C176FC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d64e5d2-c8cc-33db-a467-4e5f7e7d8336.roa
Signing time: Thu 05 Jan 2023 12:00:00 +0000
ROA not before: Thu 05 Jan 2023 12:00:00 +0000
ROA not after: Fri 10 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7a:da:7b:fe:75:8d:47:57:8c:17:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 5 12:00:00 2023 GMT
Not After : Feb 10 05:00:00 2023 GMT
Subject: CN=5c6dd41c-1e7c-495d-a8d8-90955e39fd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:3d:61:ad:ec:4f:b9:3d:46:0e:72:b6:b8:
f2:e8:7d:43:b9:58:56:9e:9b:b5:6c:15:ce:14:d7:
87:90:c9:79:ae:aa:49:18:d4:3d:a1:af:7e:79:95:
e9:8b:7f:f0:85:47:0b:f9:cf:34:30:60:60:ca:0b:
55:0f:a1:ad:2e:dc:38:d9:3e:34:d3:7b:68:b6:8e:
48:4f:f1:64:16:9b:b2:c5:f7:dc:6a:8d:6f:89:a1:
ce:69:82:c1:c4:19:4b:cf:f6:74:66:de:66:1b:5a:
d8:6f:41:58:3d:93:67:67:9e:5a:8c:fc:5b:5d:4b:
d9:00:60:95:d9:4b:86:ec:fb:c8:b7:57:68:69:c2:
27:df:53:d0:d8:82:99:94:77:77:89:fc:13:7e:0f:
9e:41:48:73:7b:17:96:cf:08:06:93:ac:a3:ae:db:
fa:59:1c:fc:77:f5:d9:39:02:ce:7d:39:32:bf:c1:
1c:24:55:c0:a9:52:1d:89:75:48:e3:c0:6f:40:d2:
a9:0c:2c:87:87:83:b9:58:f3:e3:37:76:96:9b:f9:
b2:c0:dd:ab:45:db:4e:ef:45:3f:9a:5a:06:d0:ef:
b2:ba:4a:24:00:25:ed:cf:38:85:02:d1:d0:b6:6e:
08:b3:6a:9e:3b:e3:f4:69:4e:17:1e:0e:b4:4d:89:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:B7:11:E0:86:85:23:1A:0C:F1:C1:05:1D:7F:91:98:CE:7E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1d64e5d2-c8cc-33db-a467-4e5f7e7d8336.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:a9:14:f1:06:d6:fd:6d:83:d6:c5:65:83:68:80:f2:37:93:
53:75:73:58:44:47:af:36:17:9f:63:68:69:15:ce:e2:d3:f1:
a2:68:0a:2f:05:be:d2:d4:c4:8b:4c:d0:53:91:41:23:4d:e6:
fa:fc:77:29:88:13:ff:bc:fa:b3:d2:8a:a7:c5:a9:77:9e:0a:
d8:73:2a:d4:fe:1c:e1:68:f7:dc:03:dc:f3:ba:0c:58:55:32:
0c:78:a1:16:0a:c3:21:2b:ba:b6:3c:35:a8:f7:1e:80:68:0e:
fe:fe:7b:4d:74:26:11:d6:52:53:87:2c:a8:89:1e:5c:f6:47:
0a:50:49:0d:7e:84:bb:45:20:45:3b:e2:9c:4b:cf:23:17:79:
ce:9d:a6:c8:2d:a1:71:2d:58:3f:af:d8:88:ef:78:51:de:16:
92:54:84:49:c3:db:d1:54:33:5f:fa:42:47:69:bd:92:1c:da:
a1:b3:04:f6:b6:89:9b:d6:07:5a:02:a4:bd:09:28:3e:92:5f:
a0:1e:79:47:ce:ac:cd:11:37:a7:f8:13:b2:9e:a2:8a:9a:f1:
78:7a:6c:37:07:94:4c:3a:54:80:74:f7:d0:f4:2c:c7:72:5f:
1c:50:a4:39:2e:87:1b:1f:86:f4:36:ab:c0:7c:f0:47:06:75:
a5:33:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:50:00 2025 by rpki-client