Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d4c53ff-bbb1-3b95-a0bd-8ad09cb176ee.roa
File: 3d4c53ff-bbb1-3b95-a0bd-8ad09cb176ee.roa (raw, json)
Hash identifier: RVsdfE0zhfa/0a92xiJgacE+CGVDfWXZJZPBMtdh8pA=
Subject key identifier: 78:CE:B8:DA:4F:AA:BB:EA:BB:81:63:F1:A4:19:0A:EF:B3:31:2D:BC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8B0E0D9F581D89D22892B600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d4c53ff-bbb1-3b95-a0bd-8ad09cb176ee.roa
Signing time: Tue 11 Oct 2022 18:48:07 +0000
ROA not before: Tue 11 Oct 2022 18:48:07 +0000
ROA not after: Wed 16 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8b:0e:0d:9f:58:1d:89:d2:28:92:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 11 18:48:07 2022 GMT
Not After : Nov 16 05:00:00 2022 GMT
Subject: CN=223f70e0-59e0-4332-b0f8-b39e4f5cd8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:48:b0:fb:20:5d:c6:0e:f7:72:da:2f:25:1f:
7c:0b:cc:68:e7:94:73:06:a3:aa:62:25:e2:59:cd:
65:30:d9:a1:0b:c3:5d:c0:e9:15:dd:08:ff:36:20:
54:87:49:9e:c4:ca:2d:4b:b1:d1:3a:dc:69:d3:c8:
ea:b7:19:95:d9:bd:74:0c:ac:9e:72:dc:80:d8:30:
40:dd:8a:0b:7b:8b:da:a5:00:fc:fd:09:25:cf:3a:
b6:54:64:42:9c:11:50:25:25:7e:e9:99:31:fb:c0:
20:fd:9c:60:1a:2c:fd:f0:28:7f:a3:13:87:a4:dd:
d9:77:c1:12:4c:a8:53:af:b1:9c:97:b5:be:c4:2e:
7c:13:9b:7f:93:1b:89:d6:7b:89:6d:09:78:2a:3e:
43:8b:ce:6c:5d:d4:1c:29:fb:54:cc:ef:71:9b:4c:
84:21:7e:ec:99:2c:72:66:9f:14:3c:4c:f3:be:e4:
13:8a:4e:85:10:56:94:26:d2:15:2a:f3:15:8b:aa:
d3:a6:f8:ea:d0:24:18:0c:e8:13:94:8d:e3:80:c2:
57:ea:33:03:7b:dd:69:54:41:95:ff:77:aa:29:87:
3a:68:97:78:58:0e:be:85:b0:94:0d:13:5f:88:a2:
ed:31:14:61:75:f9:1c:52:9e:9a:7c:83:03:90:52:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:B8:DA:4F:AA:BB:EA:BB:81:63:F1:A4:19:0A:EF:B3:31:2D:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d4c53ff-bbb1-3b95-a0bd-8ad09cb176ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:e4:dd:24:92:d2:42:33:b8:21:d4:5e:60:b3:81:b8:3f:2a:
42:2b:dd:6f:fc:68:16:78:13:40:4f:3a:0a:28:39:f8:83:60:
6e:26:aa:f5:0a:91:cc:08:55:75:6f:66:d0:e9:5a:e3:c2:2c:
10:12:d4:49:fb:81:fc:44:20:59:0b:3f:b6:a6:5c:9e:84:16:
9e:8f:61:49:91:90:37:a4:13:43:29:f1:b8:79:14:69:8a:da:
bd:7b:ef:1b:fc:5f:83:24:5d:54:ce:56:a6:e9:f2:31:64:59:
d9:45:b5:88:56:0a:63:fc:dd:2b:04:7c:ba:07:59:0f:5e:01:
0d:8d:85:cc:ca:ff:b1:4f:48:71:02:33:dd:2f:12:cd:12:75:
46:53:b3:80:44:62:24:5b:fc:18:b6:4d:39:99:a5:c3:c9:72:
ff:7f:45:1a:55:0f:c7:9b:97:43:40:03:57:ca:31:cb:c9:56:
86:36:da:59:0b:e9:cf:d1:85:7d:cd:a6:26:12:9b:b4:3a:75:
4d:bb:b0:8d:71:22:f0:c3:63:f9:ce:5f:9b:47:68:c7:3a:a8:
a1:4c:c9:bc:57:ca:83:53:35:85:e4:22:df:aa:c7:f3:00:14:
27:5b:14:ef:ee:3f:9b:6f:46:63:9b:84:bd:eb:10:44:fc:64:
00:52:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:29 2025 by rpki-client