Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/332dd828-1f2c-373a-821c-8e6c702142d6.roa
File: 332dd828-1f2c-373a-821c-8e6c702142d6.roa (raw, json)
Hash identifier: XaRGNDDBtaQKZ/HleAnPMwbJhv6FM3anMfR5BgM8FQw=
Subject key identifier: 6C:DA:42:A2:DF:D3:83:F9:F0:8B:F8:8C:35:37:79:85:5C:36:77:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584075B4854713F9F1437A248E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/332dd828-1f2c-373a-821c-8e6c702142d6.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:b4:85:47:13:f9:f1:43:7a:24:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=5161b52d-c71e-431f-a47e-63bbccbc9b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:24:66:22:7d:20:1a:ab:6f:b4:ab:51:6a:
fd:2b:96:9b:5e:ee:ab:22:e4:7e:63:f6:4c:fa:00:
8d:09:08:d6:aa:db:23:de:9c:a5:6e:32:2d:73:3a:
7a:a7:2d:b1:32:c6:61:2a:ab:ca:b1:a4:37:ac:50:
e3:a0:64:e7:48:ad:de:03:a0:2c:86:13:d1:a9:c8:
3e:f2:d0:00:51:9d:43:e4:ad:26:97:8c:b6:c5:dc:
32:6d:5a:2d:6a:c6:a6:ec:df:6c:45:8e:63:9a:04:
e0:8b:1c:8a:2f:19:a6:0f:b3:4b:41:f9:fb:6d:c9:
f6:00:33:e9:e2:5b:71:26:f6:54:46:51:aa:51:80:
cf:84:5b:77:00:a4:86:c4:0a:37:4a:64:e9:29:8f:
c6:5c:15:81:bb:23:34:8a:5f:36:2f:1e:ad:c6:59:
61:43:da:02:aa:64:2b:76:ea:36:19:2d:85:e6:cc:
1d:29:34:c3:c9:3c:3b:85:1d:a0:07:33:27:80:54:
29:e1:3a:8c:02:7a:19:e3:f9:db:91:96:84:97:1d:
5b:60:fd:94:b9:14:a9:f3:ad:50:2f:cc:a1:7e:e8:
65:0a:18:38:bf:d8:a3:71:1b:db:93:ed:e4:51:95:
f7:44:aa:35:c4:fe:ca:13:ab:98:a8:3b:09:a3:06:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:42:A2:DF:D3:83:F9:F0:8B:F8:8C:35:37:79:85:5C:36:77:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/332dd828-1f2c-373a-821c-8e6c702142d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:be:6a:79:3b:06:37:5b:ef:cb:0c:bd:ce:b5:67:67:de:ef:
29:b2:3b:36:78:cd:1a:37:4f:ff:9e:df:71:b8:cb:80:9c:6d:
83:c4:88:ec:ba:b8:4e:b5:e0:af:55:6a:b4:8a:2c:31:aa:81:
44:d2:1d:4b:34:6a:8f:c1:83:95:1d:74:8b:31:bf:2a:c3:33:
ba:ed:e2:e1:4a:41:ee:5d:6a:1b:1b:2d:83:48:bb:52:7e:a6:
7b:22:6f:f3:b3:01:02:9d:c2:b7:9e:ef:2d:42:2b:1a:c5:b2:
db:72:d8:3d:39:95:80:49:61:00:47:5a:47:85:27:53:5b:f4:
58:5f:cd:f6:e8:11:5e:4a:3c:e6:33:c5:cf:ac:37:de:ff:00:
d8:63:69:b3:f3:80:8e:c8:b0:a6:de:ba:2c:25:3b:38:99:8c:
e1:f0:e2:76:cf:20:63:93:4c:84:e0:ce:b9:b4:ce:66:ed:12:
d1:ba:25:42:c2:2f:fb:70:34:fd:e6:32:8b:93:50:68:b7:9d:
2f:fd:a3:9f:6d:5e:4a:51:e7:ff:ca:19:ba:ca:ea:48:bf:0e:
5a:86:2b:bf:74:6f:54:18:4f:71:58:38:24:53:eb:48:7f:a4:
93:af:06:66:f4:b0:4d:8b:10:cf:a8:1e:eb:db:ac:54:c4:6d:
ec:96:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:48 2025 by rpki-client