Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b1874c5-0112-3b5c-874f-2d2cf06d0aa4.roa
File: 3b1874c5-0112-3b5c-874f-2d2cf06d0aa4.roa (raw, json)
Hash identifier: mug/d3e1k+vRcCwvNupj/NHbKLCdDrgADw77gxCKlGY=
Subject key identifier: C3:D7:8D:C1:B2:EC:50:12:F8:55:F1:24:C1:76:3B:1E:A0:95:CC:CD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B89D1DF8AFC85D36CFE2F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b1874c5-0112-3b5c-874f-2d2cf06d0aa4.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:89:d1:df:8a:fc:85:d3:6c:fe:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=67ff634f-ef95-4631-b52f-1bfd49fdba7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:70:ab:45:5f:36:a2:03:db:7d:ba:e9:26:
b3:a4:0c:35:37:16:17:09:5b:60:fe:a8:8c:83:3c:
c4:7b:9d:b8:28:a4:02:12:ec:05:43:03:55:70:0b:
e4:c5:3c:0a:74:ee:13:95:dd:f9:86:2f:c5:a4:c1:
eb:4f:9e:df:4f:03:ca:23:6b:00:74:e9:84:d3:7f:
11:37:8e:7f:a7:17:d7:8a:d3:3d:60:26:f9:44:9c:
9b:5c:2b:63:de:ed:83:18:0d:9e:27:9e:ee:70:5a:
f8:14:6d:5b:a5:71:0f:fb:ea:1e:03:0d:3c:81:73:
b6:b3:8f:e9:17:57:81:e5:19:14:58:cd:6f:b2:67:
c2:d9:f0:6d:8b:23:d1:00:e9:02:1d:d1:a2:b5:1a:
ce:6e:d1:8b:1b:c1:15:e8:3e:c5:30:87:27:44:62:
c1:8d:5e:de:19:cf:7b:dd:fb:ec:fb:df:f5:a9:17:
8d:c5:e5:34:cd:54:4e:b8:80:7e:07:dd:0e:43:ad:
d4:fd:c5:47:df:8b:1d:a5:90:29:9e:80:e0:f5:02:
f1:c7:96:c2:31:fe:93:39:75:90:56:df:0b:78:92:
3e:94:fd:fc:c5:7c:80:db:d3:3d:30:5b:b9:fe:d4:
62:1d:cb:09:e2:78:f2:51:11:77:b0:d6:d6:39:a2:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:8D:C1:B2:EC:50:12:F8:55:F1:24:C1:76:3B:1E:A0:95:CC:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b1874c5-0112-3b5c-874f-2d2cf06d0aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:32:01:54:b5:70:41:55:59:2a:e0:c6:a9:09:fe:c2:5d:b5:
7e:43:f6:76:7b:d7:ec:c3:42:f0:44:2a:71:2e:67:34:71:6f:
8e:d8:fc:5d:6e:da:ea:e6:52:3e:e9:22:30:62:32:25:b7:83:
2b:b9:d5:ca:ae:0a:0d:75:63:e5:92:c7:6d:83:35:ec:d5:ce:
e8:63:10:91:4b:c8:37:d1:dd:b7:1d:24:34:20:ab:8c:90:90:
99:d5:4a:de:55:f4:6c:69:98:c2:92:3e:76:db:e5:b1:77:ec:
c9:48:dc:f9:39:12:63:77:68:b9:16:f1:32:82:ba:60:65:41:
d3:47:90:f3:41:2f:e4:76:d4:ef:d2:86:ca:bf:25:fc:d4:eb:
49:f0:2e:e7:43:a2:89:be:eb:c0:ad:84:92:0f:8a:fd:75:88:
a7:78:61:a6:f1:f9:bb:3b:c1:65:30:78:b4:74:40:7f:69:18:
49:5d:50:60:90:92:f9:67:a6:b3:c5:82:70:74:23:d6:c8:e8:
89:ef:03:4f:ba:d9:19:3a:07:d9:69:e0:d3:ca:74:cb:4f:fb:
70:72:ba:df:78:4e:50:63:76:ae:42:3b:89:1e:3c:31:81:57:
3f:02:6a:67:e3:09:90:3f:2e:4f:af:44:42:73:39:a4:e1:fb:
5e:f3:05:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:45 2025 by rpki-client