Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fe298c2-60ad-311e-a119-ecf0d868e5ae.roa
File: 1fe298c2-60ad-311e-a119-ecf0d868e5ae.roa (raw, json)
Hash identifier: /NeHYBm4LOCILqxxkNuR0f3RPbUBVdbVz7q5yDTCxGk=
Subject key identifier: 72:E1:49:03:3E:63:3C:BB:3F:EE:AC:7B:39:1E:3A:87:FB:E9:CC:65
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C3DFA24047B82AC5B427F5C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fe298c2-60ad-311e-a119-ecf0d868e5ae.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:df:a2:40:47:b8:2a:c5:b4:27:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=aa1af6a0-dd02-4652-9854-ad824b37c7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:e3:ad:62:14:ed:36:7d:b0:4c:bb:21:b3:
45:a5:f7:0d:fc:0b:cc:e4:0b:10:5b:ad:1b:95:ee:
10:b1:00:72:65:20:1d:9c:e4:6e:55:82:f3:8c:c7:
0d:0a:fb:04:e1:3d:6c:2b:14:02:74:3b:de:c0:9d:
4d:3b:a9:9a:18:f4:4d:c6:2d:8b:4c:05:11:15:ae:
a8:93:ec:fd:3e:1a:f3:35:35:a5:8c:be:ff:2b:61:
2b:94:b0:c2:8a:33:96:e4:e1:78:91:4c:5c:57:a5:
b5:af:7d:5c:e2:5a:ab:e4:a4:b6:4a:46:f0:0a:86:
d6:98:70:44:be:f3:03:a9:2c:50:a2:cd:4a:7b:d5:
2d:e8:c2:61:dc:a2:fb:d9:05:c2:51:a9:6f:9a:47:
5c:57:de:e0:26:aa:46:b9:ce:ff:dd:01:7d:12:f4:
1d:26:fc:53:13:87:13:a5:7c:22:10:16:fd:4b:76:
1e:0a:fb:a3:62:3d:f7:d7:bc:1a:bd:8a:e8:26:dc:
e0:4a:bf:db:bb:22:33:f7:20:80:e5:33:cc:43:19:
c7:93:32:25:eb:d8:33:91:44:7d:13:1f:e4:d7:a3:
03:48:b8:80:50:ef:d5:10:b1:d0:ca:d9:c8:97:46:
b0:7d:88:10:ff:9d:1b:22:4f:28:dd:a1:f1:c2:f5:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E1:49:03:3E:63:3C:BB:3F:EE:AC:7B:39:1E:3A:87:FB:E9:CC:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fe298c2-60ad-311e-a119-ecf0d868e5ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:a8:bb:8c:d7:7b:4a:d6:88:f2:a8:db:4d:39:ce:20:77:b7:
8b:f7:46:1b:46:59:28:65:9a:50:a1:44:64:58:37:ef:04:68:
b3:52:68:84:e7:a5:8b:ff:31:79:1e:7a:07:9c:d3:e6:19:ad:
9e:bb:c3:05:f1:75:92:15:89:9a:57:d8:8b:79:db:03:60:96:
b0:14:fa:46:10:5c:10:32:2a:00:85:e6:06:57:47:bb:45:b4:
aa:a4:28:9e:3d:42:84:4d:59:c9:91:58:1f:c4:d1:37:4a:70:
57:29:6e:44:28:7a:68:46:b0:80:89:3f:88:fd:4c:35:ca:a6:
46:2e:89:3a:4d:eb:51:44:15:7e:96:5f:06:43:a4:32:5a:67:
35:f4:5d:41:21:20:64:b8:ce:8f:02:74:e5:cb:99:61:f8:5b:
d4:1b:04:c2:9b:b1:99:38:7d:ce:f2:38:91:c4:b4:33:38:9a:
15:c0:49:8d:59:ec:99:d1:66:54:24:75:36:9f:f2:53:d7:84:
6d:10:8b:f5:0f:d3:aa:48:52:5e:ff:8d:f9:5c:c5:7d:10:ea:
80:be:8b:77:78:ef:38:fa:62:5d:20:0f:58:02:b5:d8:6e:99:
93:5b:5d:66:44:d8:91:27:92:54:ae:a0:b7:fa:b1:e9:dc:56:
11:c4:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:21 2025 by rpki-client