Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26ecda52-05ec-3cc5-bcab-71071807b1b4.roa
File: 26ecda52-05ec-3cc5-bcab-71071807b1b4.roa (raw, json)
Hash identifier: x/ZGS9/Znd7WI1fKfe2fEHhvGNvx4VIrZQiGbzMU5QI=
Subject key identifier: 1B:47:A1:95:6A:B9:11:EE:E3:D6:75:11:87:B1:1A:CB:B1:20:8F:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFD4FF70E7D1752CB72453180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26ecda52-05ec-3cc5-bcab-71071807b1b4.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:4f:f7:0e:7d:17:52:cb:72:45:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=d4b539a4-9ae6-47e3-a30b-ca0b287b3f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:c3:65:19:9f:41:4e:be:47:7a:2c:0e:7c:
d1:3a:a5:76:7b:89:2e:c6:54:38:02:24:3e:74:11:
f3:61:f1:a0:3a:5c:56:fe:8c:cc:fd:ac:19:6a:33:
77:11:46:78:71:4d:ef:ba:27:7b:af:99:69:3e:74:
ad:40:9e:4d:bb:ab:d0:a2:6e:24:6e:7b:7b:b6:f0:
19:61:a0:2c:19:5a:71:fe:f9:63:55:f9:c4:26:39:
f9:e6:01:94:c9:e5:f9:e8:49:ff:75:35:5c:ea:8f:
8a:26:9a:ef:c7:d8:2a:2c:a1:2c:99:78:e8:75:38:
78:40:6d:ca:b2:22:71:06:0c:f0:7a:c4:9d:cf:74:
40:75:45:0d:a1:0d:2e:fc:e3:64:b1:6b:0d:01:fd:
fa:a0:f1:2f:50:c2:43:55:ac:60:87:52:44:a5:91:
22:f3:a8:53:45:8a:4e:02:c7:88:32:76:1c:1f:43:
93:f8:1b:c2:e8:09:bf:f7:b6:71:ca:97:9d:d4:6e:
27:d2:c7:ab:ad:38:c7:cc:6d:bf:f3:82:ed:9e:11:
4f:7e:6a:24:97:a8:b6:75:7f:c4:d8:cf:a6:fa:97:
e2:cd:f0:10:33:70:b4:dd:d1:18:03:ae:65:af:27:
df:c6:80:54:6d:63:05:19:0e:63:33:4f:c0:c3:7c:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:A1:95:6A:B9:11:EE:E3:D6:75:11:87:B1:1A:CB:B1:20:8F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/26ecda52-05ec-3cc5-bcab-71071807b1b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:2d:6c:dc:ba:38:2d:e7:36:2d:6a:ed:f1:05:78:27:08:63:
cc:9a:78:05:35:b2:7c:e5:02:d4:b0:ed:1a:f0:86:ab:29:48:
3c:d3:c0:cf:f7:15:c9:a0:c7:af:54:77:33:39:b1:e0:c3:cb:
47:1e:9b:ba:13:e5:87:79:11:dc:55:f8:13:3b:de:2e:28:fc:
d2:f5:c8:33:bd:f2:73:5f:de:0c:15:2d:0b:78:db:cd:57:4d:
25:4a:e2:a2:e9:44:80:66:e2:1e:3d:a0:b7:f7:b1:a1:82:35:
ac:f3:dd:b4:fe:27:2c:af:9b:0e:86:a4:cc:83:7e:1c:99:bb:
ac:2b:2e:c7:02:f5:d7:a3:f8:6b:f1:6e:d1:67:7d:09:5d:a1:
88:15:c2:78:c2:89:36:d8:46:14:8e:1b:66:8f:cb:e7:4a:bb:
4f:c2:af:82:f6:7a:7e:f7:a7:05:1d:a4:c3:38:1f:50:ab:8c:
18:4a:1b:1c:d3:e8:07:89:83:11:b9:7c:cf:76:b3:67:28:05:
08:77:be:74:cd:4d:a4:1d:2a:2a:0d:bd:f0:17:3b:19:d8:88:
b6:32:1e:ef:92:d0:c9:ed:ef:8e:cb:12:be:7a:d1:bc:12:0e:
6b:7d:05:a9:40:c7:69:d5:ef:9e:55:51:14:6a:98:ca:84:40:
04:bf:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:13 2025 by rpki-client