Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a0bbba3-1996-3cf3-8058-a62c97e12065.roa
File: 2a0bbba3-1996-3cf3-8058-a62c97e12065.roa (raw, json)
Hash identifier: UiMOqggb5rfVyzxvF335QuHLfwPvInUgXqVi+hhzJeg=
Subject key identifier: 39:FC:1B:E7:F3:EE:A3:E3:D8:F3:DB:BF:A7:6E:49:24:31:B1:9C:12
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584027898C84DE6864383FBC5F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a0bbba3-1996-3cf3-8058-a62c97e12065.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:89:8c:84:de:68:64:38:3f:bc:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=a9b4f8cc-9bc5-4930-9ab9-2d8dd1153ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:81:89:68:51:5f:f3:56:6f:41:0b:78:5f:
0e:73:03:73:31:d0:d8:89:af:f5:c1:0b:ba:f2:b0:
dd:59:8a:9d:03:97:95:73:76:76:f2:3e:ec:53:37:
f1:5f:38:6d:b6:9a:db:e1:11:7b:ac:35:d0:32:a0:
3f:45:40:06:f3:d1:d3:60:8d:52:e9:b0:2f:72:5d:
60:af:32:80:07:4f:99:2d:20:78:7c:61:77:26:63:
59:fb:33:9e:24:88:91:73:77:7c:8c:b2:89:3b:f4:
11:71:10:e6:62:8d:ab:95:6a:1e:56:74:8f:4c:d2:
4b:ea:5e:c4:d0:0d:6b:0e:93:ed:22:4d:79:d2:34:
23:c3:f5:6c:94:63:c1:d6:ee:a3:a0:4f:f5:c1:16:
61:ea:a6:0c:e4:92:a3:5f:1f:d3:9c:d9:97:1a:7b:
aa:88:85:ec:b4:04:93:8e:bc:c4:30:59:4f:a3:f9:
af:0e:39:ee:45:85:3d:60:70:4c:37:4c:82:28:3f:
6a:b2:29:a0:71:af:dd:6f:94:8b:f3:dc:19:3f:4f:
5f:8b:74:bb:44:89:b9:09:0a:0f:d7:35:25:24:7f:
a0:87:22:4e:49:fb:85:8a:b6:03:5f:f4:b3:aa:7c:
8b:da:33:e9:fe:3c:42:bc:32:12:53:d5:83:12:35:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:1B:E7:F3:EE:A3:E3:D8:F3:DB:BF:A7:6E:49:24:31:B1:9C:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a0bbba3-1996-3cf3-8058-a62c97e12065.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:4f:1c:6d:1b:30:57:a8:79:42:1d:48:60:c9:d7:a9:fe:23:
93:8c:0d:a8:17:d1:3c:f8:7c:74:72:e3:a8:73:c7:90:5c:df:
4f:2c:dc:eb:a4:c6:e9:44:cb:91:16:db:58:fc:cf:ee:3d:bb:
92:e0:7a:2c:f6:c3:8e:1b:17:92:b7:99:46:a1:6a:1d:33:b8:
e3:c4:75:f5:98:19:8f:6f:91:bf:2b:b5:d6:9e:9e:0d:92:b3:
af:54:01:1b:9a:be:57:aa:f5:aa:7b:21:9c:6c:1c:9f:2a:7c:
8f:15:a7:4c:91:fb:ec:1d:d0:13:0f:12:5b:5c:70:02:54:bf:
37:18:6e:a5:da:a4:b1:85:00:42:44:ae:77:6a:4d:f5:50:a5:
b6:a3:c3:79:83:4c:f0:37:53:e3:d7:44:db:d9:cc:d7:9e:84:
e4:73:dd:60:ec:da:63:c9:22:b6:56:f9:18:be:f2:12:80:3e:
af:f1:e1:73:58:7a:9b:78:32:e5:d7:56:4d:d9:4d:5f:7a:12:
82:d0:bb:32:be:59:d5:ff:72:80:30:7f:a8:29:68:9c:64:5f:
88:30:fe:93:83:1d:0e:97:fe:d7:93:f3:43:cf:d5:0d:16:ac:
06:f0:d7:f1:37:af:f5:b8:75:ce:08:29:1c:21:58:14:d2:5b:
d3:6b:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:26 2025 by rpki-client