Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29101d0f-ae9e-3247-b8e5-e145be06fe5b.roa
File: 29101d0f-ae9e-3247-b8e5-e145be06fe5b.roa (raw, json)
Hash identifier: qrgBWwTudnsSAEvni2bZ3awr8pZ5VJ86stJVpiC1Kng=
Subject key identifier: 04:4A:51:DB:24:DB:1F:A5:C2:F5:BF:3F:6A:75:22:8D:C3:08:6E:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7ADB47D2AB67AA9AADBDE980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29101d0f-ae9e-3247-b8e5-e145be06fe5b.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Thu 10 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7a:db:47:d2:ab:67:aa:9a:ad:bd:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Nov 10 05:00:00 2022 GMT
Subject: CN=36832d0b-713d-4188-929c-cf95078c7794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:2b:ac:94:5c:61:d9:21:e7:1a:c0:90:4b:
83:8b:d5:90:7e:16:49:b7:85:56:4a:73:ea:b9:e7:
73:66:14:01:d8:a4:d1:f5:f7:cd:88:d3:1f:53:a5:
2c:f9:66:0b:a5:cc:0a:c0:f2:c8:90:7d:6e:c3:cc:
2e:27:31:d5:78:6b:c6:e2:fa:6a:eb:2b:53:5c:10:
ea:9a:58:fe:ad:2e:a2:75:20:bd:9a:a5:f2:1e:89:
55:54:36:da:47:45:88:ca:ff:0d:f4:39:42:71:02:
a2:e3:56:03:81:9c:a1:ea:2d:4d:25:31:cb:ac:ab:
9f:a2:b7:0f:ac:dd:fb:e6:2f:4d:e6:bb:b5:61:ae:
c9:a0:4e:aa:23:8b:74:9f:c2:45:63:9b:f0:be:29:
21:f0:41:bf:fd:fa:97:3d:ea:28:a5:7c:2d:e4:f3:
27:33:f2:59:eb:9b:55:8d:15:ca:5d:ac:5e:79:74:
67:ad:cb:e7:fb:a2:ad:1a:59:e9:bf:7a:5f:8d:d2:
9e:46:f3:10:d3:ad:c2:ab:d8:99:91:bd:4e:00:53:
69:e9:89:e0:7e:8e:1a:0b:2f:ac:ae:1e:f8:84:a1:
14:67:e9:bf:13:59:01:0c:e5:fe:10:9d:51:be:ea:
bc:a0:7a:8b:10:33:b1:b8:ed:28:e0:e1:1d:da:42:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:51:DB:24:DB:1F:A5:C2:F5:BF:3F:6A:75:22:8D:C3:08:6E:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29101d0f-ae9e-3247-b8e5-e145be06fe5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:80:e0:e5:a2:c9:ca:dc:11:46:d4:e7:67:05:ff:43:3f:4f:
5a:a3:1d:64:e1:f6:59:41:dd:97:bd:eb:6d:bd:b1:40:f6:39:
a5:99:ae:fc:64:e8:9c:ee:45:cf:45:d9:cb:00:04:d4:c2:72:
9b:95:ba:d8:99:e3:3f:20:07:9b:c3:e8:5e:02:5d:f9:49:2b:
0f:20:b3:d8:b1:b1:c8:d7:04:5c:36:4f:5a:39:51:e7:62:ac:
3e:9d:43:40:6b:d5:84:e2:29:1e:80:b4:16:7f:44:f8:c2:57:
00:4b:5d:73:9a:51:e1:4c:9b:7d:43:e1:4a:11:02:34:93:6d:
77:e0:2b:ea:57:38:43:f4:00:3b:61:e2:7b:87:d0:a0:12:dc:
59:9e:e5:35:e3:05:a5:0b:d7:79:12:24:c8:5b:24:21:59:56:
12:bb:f7:f0:16:3f:bf:49:5d:75:b6:50:a5:9a:43:54:84:da:
d7:14:68:e7:26:86:17:17:7b:38:05:f2:4c:7b:9f:12:5f:cd:
a4:05:26:c2:ea:1c:70:76:32:34:b3:98:19:31:3c:31:5d:2e:
58:67:9d:a8:62:cf:a2:d0:1f:ed:72:3c:25:d5:87:5a:8f:1c:
18:13:41:97:fa:26:95:53:5f:c8:42:d1:c5:79:17:82:b7:ee:
b9:ef:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:03 2025 by rpki-client