Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20428e8a-5df1-384d-9898-a8c1a1cb176b.roa
File: 20428e8a-5df1-384d-9898-a8c1a1cb176b.roa (raw, json)
Hash identifier: P0pge3Aq8E1v2J8rA2x/9EmHUbHGr0dhd/bNE3sgyVo=
Subject key identifier: 97:84:D0:AA:D8:2B:3B:A6:BE:5F:B4:DB:78:FB:70:F1:C5:CA:6A:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C8F6A2EAE39B8CD84E45E0C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20428e8a-5df1-384d-9898-a8c1a1cb176b.roa
Signing time: Thu 02 Feb 2023 12:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:00:00 +0000
ROA not after: Fri 10 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c8:f6:a2:ea:e3:9b:8c:d8:4e:45:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 12:00:00 2023 GMT
Not After : Mar 10 05:00:00 2023 GMT
Subject: CN=97dcdb9d-b47b-4751-b557-cfac34d87be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3f:ca:48:30:4a:d6:2d:88:d3:59:57:7d:52:
9f:6a:21:32:3a:45:0f:00:f9:17:56:b0:af:01:c0:
f9:cd:17:c2:8c:94:d4:b0:05:a0:57:17:95:a6:12:
30:5b:47:79:34:39:35:e7:01:e3:90:77:c8:04:60:
a2:70:95:63:17:89:36:a8:f5:64:e7:93:85:5b:65:
48:6f:e2:71:08:76:db:30:e2:95:3b:e8:ce:32:65:
3c:d6:8a:2e:57:9a:9f:de:34:a3:06:ee:68:6b:be:
14:e2:31:59:0e:a7:7f:ba:43:2d:30:aa:84:02:2a:
98:31:6a:f4:82:11:7b:4e:4b:95:36:72:e4:78:d6:
ff:64:fc:c5:ee:3f:5d:6c:e0:95:6d:20:88:c0:2c:
a5:72:c8:3d:75:2e:56:b9:71:11:c8:5b:43:36:42:
b0:4b:0e:26:80:58:da:ba:70:6c:45:27:1b:53:df:
ef:b8:84:1c:68:04:4b:aa:f0:e8:20:cf:64:4f:ba:
05:29:d9:b4:82:99:7f:89:82:ff:f5:73:f0:2a:a7:
b9:bc:64:61:cf:90:8a:3b:a6:8b:72:68:1d:66:4e:
c1:fc:0f:97:bb:93:64:9a:90:ea:53:72:18:24:4f:
83:b5:74:a3:8b:15:32:21:f4:25:95:ef:91:95:5f:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:D0:AA:D8:2B:3B:A6:BE:5F:B4:DB:78:FB:70:F1:C5:CA:6A:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/20428e8a-5df1-384d-9898-a8c1a1cb176b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:db:35:2c:0e:c0:ce:cd:94:13:3c:df:41:be:6e:10:2a:e7:
ac:1b:ed:15:ec:25:9c:78:92:55:71:82:96:1e:de:4c:ef:9f:
73:5d:21:8a:bf:4c:a9:59:5d:5b:db:75:2c:f6:b8:11:77:04:
1e:59:8c:e5:10:6a:b6:b8:40:47:8c:28:54:46:c8:bd:14:0c:
07:93:12:e2:77:4d:83:16:52:8c:84:18:77:d0:4e:88:9c:e5:
3e:b4:97:e5:2c:80:dc:e0:5b:24:ed:5b:3c:38:8d:ff:91:48:
7e:2f:5f:7f:ab:f7:b3:24:3c:4e:cc:fb:b1:4a:71:ea:3b:f0:
4c:45:47:03:33:df:4a:82:04:08:d7:b5:14:68:18:54:3a:e6:
16:8b:37:28:7f:a4:fd:bf:7a:27:3d:06:14:15:eb:a8:5c:f3:
d8:94:ad:79:5b:0a:54:5e:12:ea:c6:e6:5a:87:a8:7f:e8:ac:
7a:ca:24:70:8d:c9:43:9f:99:48:c1:c6:5f:23:a7:ba:ee:a2:
53:5f:9a:48:d8:f1:aa:b2:6e:9e:46:2f:b1:82:93:da:44:a8:
58:9e:13:21:a5:0b:33:71:bd:65:67:ae:b6:55:32:74:a3:d7:
36:53:cf:e9:a6:a0:c6:be:c5:d2:7f:50:82:80:1b:5a:3f:2a:
4b:8f:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:07 2025 by rpki-client