Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/385de3e3-f4f9-38de-965b-fdeda79e218e.roa
File: 385de3e3-f4f9-38de-965b-fdeda79e218e.roa (raw, json)
Hash identifier: tU0PO9o0ZHkohFgZnBBHUyxwQpFSAfWw0uckV3lPaoY=
Subject key identifier: BA:F0:23:4E:7F:47:47:E9:87:96:A4:4A:2F:A8:F3:9A:06:90:89:AA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D9010466B6E00D0CE206153C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/385de3e3-f4f9-38de-965b-fdeda79e218e.roa
Signing time: Wed 13 Apr 2022 04:00:00 +0000
ROA not before: Wed 13 Apr 2022 04:00:00 +0000
ROA not after: Wed 18 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:90:10:46:6b:6e:00:d0:ce:20:61:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 13 04:00:00 2022 GMT
Not After : May 18 04:00:00 2022 GMT
Subject: CN=f0d1be3e-7378-46b1-b1ad-8fb719e36170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:66:1c:75:44:4f:6f:ae:1b:dd:98:b1:28:
f8:30:8a:22:a7:ed:a0:35:d3:af:62:46:ad:96:20:
ea:b8:43:3f:3e:9d:4e:de:a8:92:1f:8f:31:48:72:
e2:3d:3f:91:f4:d1:c6:9b:5e:df:a9:43:5f:cf:28:
e7:0c:9b:e1:d3:d0:a9:e1:53:7a:4f:c9:8c:5f:24:
b4:19:40:b5:45:6b:b0:92:64:09:5f:a6:71:9e:27:
5b:33:50:05:84:66:e4:4d:84:88:a1:68:6e:4f:df:
06:dc:7c:7f:2b:45:b5:92:cf:aa:1a:92:58:98:04:
6b:da:41:4a:d5:ba:3c:a0:22:14:64:e6:f5:55:d7:
3d:f0:c6:07:b4:e9:4c:e6:00:10:89:b0:08:3b:ee:
93:7c:89:fd:f8:44:91:46:f4:db:3f:77:1a:85:97:
47:12:8d:1a:ce:88:9c:e6:a6:9c:9f:8d:90:3b:bd:
2c:0f:82:07:97:e1:36:9f:93:dd:32:93:68:db:19:
29:49:f9:9a:87:e7:bd:fd:ee:1d:38:56:30:65:7e:
e9:16:e0:61:03:20:1d:17:16:f0:36:02:0b:98:89:
f3:b8:e7:ee:3a:55:fd:80:8f:54:53:60:95:8c:4c:
a2:59:2c:20:26:af:69:8f:43:2e:c9:f6:a3:c3:00:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:23:4E:7F:47:47:E9:87:96:A4:4A:2F:A8:F3:9A:06:90:89:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/385de3e3-f4f9-38de-965b-fdeda79e218e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:6e:c2:fe:0c:fb:86:58:44:23:d0:bd:d0:91:7a:94:3a:28:
8a:fe:c8:78:c2:7c:7e:14:c0:4c:c1:f3:89:cb:f3:42:7c:56:
3d:55:a8:45:e6:d6:f0:b5:32:31:62:a0:30:ed:f8:a5:06:96:
64:38:46:24:11:92:fa:63:b9:8a:0d:e8:f5:6e:a4:79:73:64:
a7:8d:e2:a9:ef:65:0f:b5:f3:11:b5:f4:02:f6:10:8b:9d:01:
e1:b5:dd:37:e1:a5:0b:17:01:f4:f4:e6:81:27:c4:bc:91:32:
2a:73:8e:8b:d8:d2:f2:f9:1a:1b:2f:13:2e:aa:12:ec:f9:19:
33:6d:f7:6c:43:81:3c:e6:fa:d8:67:1a:c0:27:7b:4e:01:22:
05:79:3d:60:9a:2d:2a:eb:24:85:d2:7c:cf:7f:6f:c6:62:df:
5a:b0:a2:5b:33:ca:99:da:57:aa:38:7e:1b:49:ad:e7:7b:55:
2c:b5:eb:f4:1c:a4:d2:8e:d7:6c:e9:bc:53:0b:16:88:74:28:
73:0c:6e:ad:c3:e6:9d:42:35:53:49:53:b0:ae:e5:f0:f3:6e:
7e:25:03:09:0b:67:fe:e9:cd:4c:b9:9b:8a:37:b5:7b:b1:96:
02:59:25:b3:8e:71:ae:b2:78:88:c2:cb:06:af:bd:d6:c2:f4:
12:2c:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:00:53 2025 by rpki-client