Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4369bd04-7aaa-3e0c-8b0e-9bd122cf89ce.roa
File: 4369bd04-7aaa-3e0c-8b0e-9bd122cf89ce.roa (raw, json)
Hash identifier: /7npJB3bksoz/Ysg1JKoDr67SYvCccwaNO0VVGk5d5M=
Subject key identifier: A4:0A:76:A2:D5:B2:46:48:C9:16:AB:C0:68:81:48:46:73:59:14:2D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F89F2F37017F2078E43DDF800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4369bd04-7aaa-3e0c-8b0e-9bd122cf89ce.roa
Signing time: Tue 11 Oct 2022 18:48:07 +0000
ROA not before: Tue 11 Oct 2022 18:48:07 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:89:f2:f3:70:17:f2:07:8e:43:dd:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 11 18:48:07 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=c5278997-a365-4acb-836a-99e102b2404e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:c9:1f:da:05:99:40:58:77:4b:df:a8:3b:
18:14:d6:da:7f:d2:b0:87:b5:3f:ef:b8:e1:f8:be:
bd:25:b2:40:9c:77:49:50:3b:30:86:99:04:38:a7:
50:86:d3:37:30:24:2f:26:a5:af:1f:e6:8b:fc:98:
47:81:68:30:17:e2:e1:f7:a3:9d:31:c4:4b:a0:24:
76:38:f3:5d:4f:88:34:f2:4c:04:77:de:4b:db:ab:
4a:49:fb:0e:ef:7a:6b:77:fd:2c:ea:c6:cf:14:ec:
9e:1e:2b:b4:de:a6:93:df:c1:29:66:92:19:ba:11:
a3:c0:2b:95:0e:d7:17:3a:31:e6:c6:b0:df:d3:85:
97:df:40:cd:92:2e:1f:6a:de:2e:73:53:37:7b:44:
e5:dd:dc:01:09:d8:32:ec:95:6b:a1:7f:63:75:e3:
b6:ed:71:c3:25:41:1c:9b:6d:dc:2e:eb:3b:9b:e7:
67:24:fd:d7:fe:e7:09:8b:ab:c5:76:74:a3:46:99:
74:49:41:9f:c9:3b:2a:b5:fe:a8:89:00:cd:d5:57:
73:b6:bc:b0:ad:0e:64:3f:5c:e5:28:d2:7a:78:9d:
c2:90:33:49:53:9e:3f:34:91:47:e6:3d:76:4c:35:
01:68:40:e3:c1:7a:c2:07:50:98:98:ca:4e:69:f1:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:76:A2:D5:B2:46:48:C9:16:AB:C0:68:81:48:46:73:59:14:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4369bd04-7aaa-3e0c-8b0e-9bd122cf89ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:fc:be:bb:e4:13:1a:6c:fd:42:e9:9d:be:ca:88:91:b7:20:
82:e0:06:c4:94:ec:a1:ea:8f:af:1b:28:dc:82:41:ed:e8:2f:
56:c2:f3:25:64:ff:df:c1:d3:df:da:86:92:11:00:bd:5b:f4:
da:d5:1c:35:83:60:77:76:16:bb:58:2a:78:53:0b:ff:bc:c1:
99:9d:95:57:4b:f2:45:77:01:13:e9:63:59:9b:de:56:29:59:
6b:ac:e2:10:81:b6:33:41:fb:8a:07:27:90:10:f6:23:0e:e0:
e7:19:b8:6e:38:51:4c:4e:c5:6e:9a:a1:fb:5a:d6:3f:f8:34:
c0:9b:6e:41:f2:04:04:e7:05:40:95:e1:f8:58:dc:ec:79:8e:
e9:51:8a:b6:3f:a4:d9:34:96:6a:80:57:bb:8a:e6:a8:ef:8a:
b9:71:fe:a8:f2:6f:21:1b:e5:a1:fa:5d:4f:8c:e1:ff:98:b0:
8d:a0:60:c0:74:ab:a8:cc:2d:99:a1:4a:31:b7:0f:51:85:d3:
c8:62:90:43:cf:01:0a:db:a0:f6:2e:41:7d:e4:31:df:a1:ff:
29:8a:4b:78:e0:21:3e:d9:56:e9:88:b9:43:0c:13:a5:ca:4f:
0e:83:08:5a:b0:d8:3a:e1:ee:3c:d7:ca:f5:e8:e8:b2:a5:70:
a4:ff:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:16 2025 by rpki-client