Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2738e0ff-4c63-3b62-b5bf-ccb0209fdbf7.roa
File: 2738e0ff-4c63-3b62-b5bf-ccb0209fdbf7.roa (raw, json)
Hash identifier: yqS/nUV6CxVbgvFNYCn93MsbcoHbT2MFkFs+RJjaNhQ=
Subject key identifier: 04:E1:2E:2B:BA:A8:0B:5E:7B:2C:91:00:05:3E:21:08:01:D8:D6:94
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D1AB9687829E2902062A3B980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2738e0ff-4c63-3b62-b5bf-ccb0209fdbf7.roa
Signing time: Wed 02 Mar 2022 05:00:00 +0000
ROA not before: Wed 02 Mar 2022 05:00:00 +0000
ROA not after: Wed 06 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1a:b9:68:78:29:e2:90:20:62:a3:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 2 05:00:00 2022 GMT
Not After : Apr 6 04:00:00 2022 GMT
Subject: CN=e8cf7b7d-73e2-4c89-9734-6a99d0c5125e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:f2:03:22:bb:9b:8b:2b:88:8f:0d:da:79:
34:36:e7:ce:3d:d7:71:a7:5b:9d:98:d0:cb:33:2e:
e6:fd:c8:a0:04:9d:e3:fd:64:59:1b:81:de:31:2c:
d9:9c:06:90:fc:62:14:c4:7d:81:eb:17:e6:c9:ca:
55:d7:13:26:3e:ce:ae:ec:c9:b2:f5:b6:f5:03:4f:
a7:1b:86:e3:cc:bb:62:c3:71:80:73:41:8c:08:ec:
e8:f3:6b:2e:0b:96:07:42:23:d5:3e:8d:c0:46:c8:
42:d8:6e:8c:ec:03:51:68:2a:36:a9:c0:a0:81:3b:
6f:bd:39:4e:46:07:65:de:f6:7e:d3:11:76:1c:45:
7c:9a:60:46:27:f0:2a:fd:da:b2:55:c3:8f:0b:ed:
b8:8f:29:3a:de:4d:bd:3e:81:6b:6f:d0:7d:e9:38:
66:95:2b:60:13:e6:90:01:05:19:9a:1a:a8:9c:d3:
e8:a4:9d:74:53:66:97:a9:ae:33:c8:9b:fe:ca:31:
45:cc:dd:ca:4a:e6:17:27:23:18:ee:5a:3d:5e:2a:
33:ca:ce:55:24:7c:14:99:e7:ae:71:08:56:7b:b5:
72:80:21:21:a6:c3:4a:a3:54:c7:41:e1:46:6f:f4:
cd:0b:89:9e:99:de:ef:7d:06:19:fc:c6:95:b4:ca:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:2E:2B:BA:A8:0B:5E:7B:2C:91:00:05:3E:21:08:01:D8:D6:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2738e0ff-4c63-3b62-b5bf-ccb0209fdbf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:04:f2:34:b9:15:c8:84:48:52:fd:8a:6b:99:1f:5f:25:65:
76:cc:81:d3:d6:ec:0f:cc:eb:b8:07:dc:0b:f9:6b:29:fe:99:
34:ee:0e:5c:05:97:08:74:da:97:95:cb:11:f5:cb:7a:74:bb:
4c:b3:08:6a:e6:f3:1b:9d:34:f0:2a:9c:56:48:4b:46:12:7f:
48:21:dc:b8:1d:24:d0:da:12:49:64:fc:78:6d:78:7f:08:db:
00:4b:10:da:23:09:81:af:eb:d6:1a:8c:d5:90:b2:d1:54:e7:
52:4c:eb:db:a0:64:10:83:9a:79:e5:ac:e8:c9:81:e3:80:6b:
e9:df:6d:a7:d8:3f:90:46:f1:9d:f5:ba:c2:04:da:14:34:1f:
e0:bf:63:93:98:00:fe:ad:ed:2a:e8:ad:cc:85:11:92:22:32:
11:af:27:50:5e:6e:2b:6f:21:a9:65:8a:91:fd:aa:7a:72:b2:
aa:13:7d:ca:49:c1:4a:c0:f4:af:cd:98:43:5b:be:3c:b5:38:
52:a2:68:5f:c7:1d:a3:79:fb:b4:1a:32:d4:49:12:24:69:fe:
20:bc:80:f3:a8:89:9e:aa:2c:9a:36:f6:d6:9c:52:f2:3b:80:
7a:2d:4b:d9:cd:b7:d1:56:39:92:2e:f1:a7:a2:6e:1f:a8:d2:
73:67:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:09 2025 by rpki-client