Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35e4dbad-3523-39a4-b75f-e8dbb24f56c9.roa
File: 35e4dbad-3523-39a4-b75f-e8dbb24f56c9.roa (raw, json)
Hash identifier: CZxlyUuDO/PjBqOW5hSQM5yY8qiemT7CW0b/1EvYeCw=
Subject key identifier: 33:38:2F:48:0C:A2:0E:95:F5:86:E6:21:40:03:00:8B:EE:85:AD:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840248361C7DFB53A6547670A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35e4dbad-3523-39a4-b75f-e8dbb24f56c9.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:83:61:c7:df:b5:3a:65:47:67:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=97e72355-8ee8-4821-8f7a-0d6909d6ccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:3d:14:4a:45:da:bf:95:29:a3:93:44:f6:
1d:22:37:fe:2e:38:36:72:09:90:74:f6:47:90:d4:
66:ce:52:5a:17:66:fb:4f:79:2f:a9:fe:6c:65:ac:
02:a5:64:17:37:9b:77:02:d2:5c:23:99:9d:f3:03:
f1:f0:64:3b:4a:ed:6e:9e:ed:60:c4:3f:37:1b:97:
e9:96:98:1e:ea:56:59:9f:47:92:c1:a1:03:6f:00:
2b:be:ed:fe:f4:e9:a4:57:8b:17:bd:0d:49:f6:55:
13:68:c0:a8:97:89:e0:ba:d2:d3:9e:36:4c:e1:10:
1d:ec:e2:b1:31:81:e3:45:d1:4b:6e:89:54:c7:78:
14:1d:b9:19:72:9e:00:27:81:8a:92:a8:f5:ab:d5:
af:31:e8:41:4c:90:21:03:cc:8c:1f:aa:32:ea:ca:
53:c0:d1:af:ee:85:65:63:dd:42:e6:22:59:42:ea:
cb:87:8a:6b:81:2d:2e:44:dd:e4:07:42:5f:5e:b8:
34:78:99:5f:8b:59:2d:52:03:87:1d:e4:d9:a1:62:
3d:27:53:01:6d:08:a2:be:cc:0a:61:91:f1:c3:cd:
35:39:85:5e:87:9c:5c:41:70:40:4b:e5:12:9d:43:
f2:ae:ca:05:74:85:23:fd:b8:da:83:48:84:6c:cb:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:2F:48:0C:A2:0E:95:F5:86:E6:21:40:03:00:8B:EE:85:AD:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35e4dbad-3523-39a4-b75f-e8dbb24f56c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:6d:4a:03:4e:18:5d:a1:9a:b3:28:5c:12:26:fd:3e:b6:b5:
6e:63:e1:1c:4b:ae:b5:c2:7a:03:62:f2:34:c9:8e:c0:b4:f4:
2b:4b:41:b7:d9:a0:73:c3:00:d1:82:16:9c:3d:9a:fe:f5:72:
5f:ca:07:13:8f:d1:46:84:8c:56:60:32:e4:d5:3c:06:f6:c2:
e6:bd:64:e2:86:95:c2:96:40:76:0c:1e:85:4f:79:72:cd:f1:
f6:6c:f4:e3:6c:1f:14:7c:e9:62:dd:b2:d8:e4:55:c1:cd:8c:
a3:dd:1a:6c:24:9b:73:43:0b:44:04:be:19:07:9f:15:4e:c6:
00:8d:74:cb:03:49:22:cb:5c:c2:56:2e:3a:dd:e9:f6:e5:66:
74:ab:50:3f:0d:7d:af:08:3b:8a:3f:dc:22:0d:83:4a:3f:80:
39:60:cf:f1:04:30:11:c9:50:6d:45:9b:62:4f:b8:27:bb:01:
ff:29:a6:f4:c7:62:45:f9:4a:0b:37:fa:03:b4:98:53:92:2b:
fa:f0:64:91:0e:16:b9:f1:99:ea:25:33:71:d7:0c:51:21:47:
70:98:0b:f3:64:23:f9:81:66:65:3f:58:75:1a:9f:4a:f0:3a:
3b:e2:77:3a:bb:33:1b:e8:cb:3e:a7:cc:17:c4:1e:2d:53:6a:
cf:fa:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:48:05 2025 by rpki-client