Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f12606a-3f87-37e1-b287-7fc26c0e30c5.roa
File: 2f12606a-3f87-37e1-b287-7fc26c0e30c5.roa (raw, json)
Hash identifier: osgJy3tsYIcL2wLZkWEhuH+6471HhuRKO+ai8YjnVFs=
Subject key identifier: A1:AC:9C:DC:FA:0C:B4:51:BD:2F:D1:BE:A8:F8:DB:DD:98:7C:A6:89
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F89F339A45BA671A94E0585C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f12606a-3f87-37e1-b287-7fc26c0e30c5.roa
Signing time: Tue 11 Oct 2022 18:48:07 +0000
ROA not before: Tue 11 Oct 2022 18:48:07 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:89:f3:39:a4:5b:a6:71:a9:4e:05:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 11 18:48:07 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=f4de9ac5-c611-4f54-b31f-7fcc467cbddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:6f:25:eb:d4:00:5b:5e:69:4e:55:e9:ac:
a9:f9:ab:49:18:93:b7:5c:d0:b4:bf:43:58:9b:84:
b7:10:29:84:79:76:d7:07:79:1b:9d:e6:5e:a9:a9:
b5:61:5a:2b:84:24:78:c0:fa:7c:32:80:64:0d:f4:
fa:04:95:dc:31:16:fc:f8:59:99:47:63:f5:79:f4:
4c:fa:89:4d:20:3f:fa:28:98:0e:bd:7a:0e:96:9a:
21:80:79:10:6e:a4:a6:64:de:50:63:42:5d:a3:ff:
58:96:57:90:43:ea:94:8a:7d:22:39:90:96:57:b3:
06:f8:27:03:21:33:2b:a6:d8:66:be:26:c5:19:3b:
af:88:74:5c:f4:10:d5:c3:2e:78:72:64:27:4e:94:
12:42:3f:c4:e1:27:d9:fe:34:28:28:8b:7c:59:99:
f1:90:2a:f7:12:4d:a7:a7:f4:d6:c2:fe:a5:07:16:
e0:15:90:b7:0e:77:46:f6:67:30:7e:16:3c:6a:d4:
d0:ec:1b:57:4c:72:60:b5:ff:dc:bd:d7:1b:8a:0c:
66:cf:1b:15:66:ce:7c:bc:3f:61:b5:19:19:8c:ef:
cf:6d:d7:02:3b:3c:ea:a4:46:fa:26:53:10:e6:75:
69:26:e9:fb:58:97:a7:74:ec:e7:54:09:d0:18:db:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:9C:DC:FA:0C:B4:51:BD:2F:D1:BE:A8:F8:DB:DD:98:7C:A6:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f12606a-3f87-37e1-b287-7fc26c0e30c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:97:28:30:14:7e:d1:17:5b:71:87:f6:94:f5:eb:a3:ee:d9:
c3:3c:8d:a9:c5:5b:ed:15:dd:8d:25:a8:5d:ae:4d:66:79:67:
c5:72:94:23:d9:15:00:62:03:de:fd:f5:b0:2c:8a:3f:b6:f6:
27:50:d0:d2:dc:c4:a5:2b:b1:c6:13:db:e7:4d:88:06:e3:cc:
7d:5c:e9:96:eb:40:8c:6e:10:95:ae:c8:bd:83:e4:84:c1:da:
f3:12:d1:11:9e:df:a0:18:d6:63:6f:94:ca:24:0a:29:fb:82:
20:c4:ec:31:d0:62:00:c7:7a:06:4a:02:0a:8c:32:d9:eb:aa:
0b:1d:5e:56:31:6d:c2:95:af:78:18:4b:09:c1:c1:3f:e8:d5:
6e:0a:47:cd:8d:23:65:4c:fd:42:e7:b4:d4:f2:6e:21:46:ce:
57:b8:f7:35:22:f3:21:f4:58:7d:cc:f2:89:e5:c9:3e:3b:a1:
b8:93:53:ae:44:07:41:4a:f5:6b:12:2f:87:f7:55:1e:dc:8f:
46:94:36:20:a5:87:54:d6:70:a9:d9:fc:99:6e:89:d4:38:9a:
32:78:98:e4:be:59:e5:ef:bc:96:4f:e5:de:02:17:71:70:8e:
bf:ff:cc:3d:48:c1:45:c4:19:f1:61:13:a7:fd:23:ec:57:8a:
c3:0a:d4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:51 2025 by rpki-client