Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/396e60ac-316b-3e3d-b8b0-8180a4ec5a6b.roa
File: 396e60ac-316b-3e3d-b8b0-8180a4ec5a6b.roa (raw, json)
Hash identifier: lLuSLQx4fMq2/bLIb2g5TFWV+mp88PPK+k9W63PxASA=
Subject key identifier: F4:95:1D:16:69:DA:82:19:72:32:1A:53:57:61:7A:89:16:07:80:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F04442E07C0A3D4E94646DF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/396e60ac-316b-3e3d-b8b0-8180a4ec5a6b.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:04:44:2e:07:c0:a3:d4:e9:46:46:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=24d5d425-e0d0-45c7-bc6a-3359f8f2fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:5c:ad:86:10:23:96:58:1d:81:98:2c:58:
65:ed:e5:e8:74:72:69:c6:5a:8e:72:2e:82:d1:14:
d1:dc:41:2d:d3:8a:d9:ea:60:d4:4e:a2:92:14:6d:
e4:4d:66:d6:61:7a:66:76:a5:05:0c:3b:1f:f3:0c:
00:19:25:86:ee:68:88:36:31:9b:03:2a:8e:5d:69:
80:0f:8c:cb:29:52:c8:a6:b8:cd:91:26:eb:9d:70:
b7:65:e7:20:e1:f4:50:fc:03:56:19:ef:83:6d:d6:
e3:41:d3:f2:5f:d6:64:9e:69:53:6e:4c:e2:e9:29:
13:d3:87:3f:a0:8a:fe:5f:2e:51:eb:85:66:00:c0:
ab:86:a5:12:37:fd:2b:05:b9:1d:ea:2d:8b:d6:21:
c3:8d:66:cd:5d:a6:c4:e3:d0:58:d3:a1:0f:ce:21:
7c:f9:1c:bc:fc:f5:d2:40:db:1c:e1:37:8b:cc:b6:
6f:b7:c9:88:50:2e:6e:98:eb:36:ed:b3:04:06:a6:
b1:76:e7:a1:dd:d3:53:43:6f:84:d6:30:b6:10:e1:
2f:f8:a5:bc:93:9a:52:23:81:98:a9:03:5b:ca:18:
57:9c:73:e8:e8:d7:de:40:f0:ab:fd:ee:29:d7:36:
03:f4:eb:49:93:f3:b5:8a:a5:d3:27:f3:72:5f:c6:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:1D:16:69:DA:82:19:72:32:1A:53:57:61:7A:89:16:07:80:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/396e60ac-316b-3e3d-b8b0-8180a4ec5a6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:f7:f4:83:f3:c2:f6:60:06:9b:22:28:4d:63:94:e9:81:91:
99:b4:04:17:30:01:df:9a:c4:7d:f4:c5:8b:ef:0a:ae:b2:8c:
ab:2d:10:1c:ac:c8:c5:47:b0:45:3a:ac:e5:9f:2f:f8:0c:2e:
5e:58:88:19:fd:dd:c3:e3:cc:58:b7:41:1a:0b:7a:d6:5e:bc:
d2:34:43:cc:c8:92:dc:79:0b:f1:f7:55:01:d9:c2:ee:79:bd:
e3:fd:7c:77:c0:f2:2e:37:ad:5c:6a:24:65:b8:e1:94:fb:21:
bc:6a:e6:ab:9e:e2:b1:30:ea:0c:ce:a1:5d:8b:99:9e:4f:a4:
39:12:04:5e:cc:17:fb:84:23:6c:ae:35:be:0e:d5:b5:0c:ab:
b4:64:fc:67:b4:8a:81:46:a7:03:01:60:cd:a2:6c:81:06:ef:
28:7d:c9:68:33:db:36:d9:2a:11:e9:cd:b3:0c:e6:df:90:79:
6d:b9:fe:8d:b2:48:b5:44:e1:1e:06:d4:6b:a3:7b:2a:19:53:
12:40:e3:c2:59:7b:e5:17:b5:56:be:5e:b4:fe:4d:c3:1a:7e:
e5:3b:b8:d9:dc:e0:01:2d:3f:b5:5d:de:f5:09:24:39:c9:0e:
b7:3b:f4:fb:83:86:4f:7a:6a:13:a6:37:c7:bc:3f:3c:cc:93:
4a:48:44:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:57 2025 by rpki-client