Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3167044e-67b9-3c00-8d08-b90d02535720.roa
File: 3167044e-67b9-3c00-8d08-b90d02535720.roa (raw, json)
Hash identifier: wRhlb6YGGdLRTWbIfdIosC2Kk+0c28ebfm3oUi4l81o=
Subject key identifier: 1F:3D:A0:63:11:23:EE:DD:C0:95:C3:2F:F1:E4:59:66:58:F3:D3:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053B5FE1F0DE328E8C688C780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3167044e-67b9-3c00-8d08-b90d02535720.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:b5:fe:1f:0d:e3:28:e8:c6:88:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=3ab44e7b-7de5-4ab7-85f2-951368521cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:b0:98:86:9a:d2:22:f5:9b:99:c4:6a:11:
76:f5:88:56:29:7e:80:ae:44:1f:98:eb:4c:8a:46:
42:e1:9a:e3:8a:df:fe:98:a3:02:69:6f:4d:83:2c:
fe:8b:d9:c3:8c:fc:43:6e:14:1c:bf:88:9f:8a:b3:
3f:f8:f5:18:81:7e:99:fc:d3:b2:1d:a8:93:e4:f7:
23:9d:17:bd:09:04:20:b2:1f:75:ee:15:8b:21:04:
e8:83:1d:55:31:63:69:92:07:65:95:88:56:b2:64:
14:74:51:3e:96:a2:7e:08:f2:96:a6:61:2d:52:5d:
76:7c:44:44:95:5d:ab:3b:77:55:b9:bc:80:0b:32:
64:8b:53:ac:b1:fe:cb:53:53:4c:88:36:d9:9d:b0:
5b:31:fa:52:88:c4:ce:71:0a:47:93:8f:99:3c:e3:
2a:1e:11:2b:a3:ed:1c:e6:1f:1f:02:e1:e6:b4:77:
45:6c:a3:e1:71:72:3d:51:ce:d0:1f:fd:5e:a9:08:
17:8c:85:19:9c:3e:55:2a:1f:1a:c7:df:f8:f3:8c:
91:13:7c:8e:ba:83:a9:96:a1:4a:b9:30:b4:f3:b2:
58:c0:1c:97:72:3b:fe:f8:ad:fc:11:cc:2a:e3:48:
1e:0c:76:65:0f:2b:69:66:e3:5d:de:a6:19:b8:0c:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:A0:63:11:23:EE:DD:C0:95:C3:2F:F1:E4:59:66:58:F3:D3:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3167044e-67b9-3c00-8d08-b90d02535720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8e:15:1c:10:0d:47:f6:b6:4d:b4:93:97:86:ba:06:bf:a8:
a5:a5:4c:4f:35:f5:58:dc:87:64:63:64:67:d6:eb:2b:6c:45:
9d:2f:0c:22:e5:d3:f9:e1:f5:13:cd:87:8d:1e:9e:d1:75:0e:
05:47:73:11:aa:8e:6c:a5:6b:df:67:f3:72:87:a9:9b:bd:e8:
20:ea:91:c1:d0:44:67:d5:7e:b5:aa:ae:54:df:d7:7b:cb:f1:
b1:ec:4f:e1:bf:44:31:c9:a7:6b:f1:8f:1d:d2:7e:a1:01:dd:
52:89:5a:8d:e0:d1:ff:d2:3c:be:d4:38:4e:a7:68:33:e8:06:
d1:a4:da:ac:2b:77:71:49:72:59:40:4a:75:58:81:a1:0b:da:
f4:8d:86:f9:ea:8b:96:d4:21:40:5e:72:6d:90:11:54:fb:64:
1e:3c:1e:00:1b:3c:77:1b:d5:a7:ea:de:99:c3:1c:3b:20:2d:
d7:5b:19:b8:6a:a7:d9:ed:0f:78:bc:5f:0b:00:e5:79:73:06:
6b:4d:d1:1d:d6:11:9f:1c:96:13:02:c8:57:9c:90:88:07:6a:
d5:83:83:db:e4:68:2a:7c:b4:b3:dc:4c:a3:a3:f2:e3:2d:87:
4b:71:2b:f7:a5:dc:7e:68:cd:13:d2:51:44:41:56:9f:ea:b5:
54:a2:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:10 2025 by rpki-client