Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/473aeecd-b68c-379b-a7a4-40bf58dc648a.roa
File: 473aeecd-b68c-379b-a7a4-40bf58dc648a.roa (raw, json)
Hash identifier: kYeFiDJcfkuUD68H01PkiRMce4llr7KMYLme9/F/DSA=
Subject key identifier: 37:3D:81:13:C2:10:19:F0:A1:20:2D:3C:5A:C1:78:78:57:96:C5:CA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE6D54E7F8E23D93287389E30
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/473aeecd-b68c-379b-a7a4-40bf58dc648a.roa
Signing time: Sun 13 Nov 2022 12:00:00 +0000
ROA not before: Sun 13 Nov 2022 12:00:00 +0000
ROA not after: Mon 19 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e6:d5:4e:7f:8e:23:d9:32:87:38:9e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 13 12:00:00 2022 GMT
Not After : Dec 19 05:00:00 2022 GMT
Subject: CN=100e26a1-06e8-4b08-9b77-bcc0c4bac9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:85:18:04:ee:48:5f:cf:04:4b:ba:e8:6e:
70:33:30:e6:ae:d8:ff:03:6b:85:f5:74:d2:6a:eb:
d4:e2:5a:45:02:59:f1:cf:44:84:c7:34:31:69:52:
c8:f6:12:ed:3e:ff:26:7f:19:16:94:2a:77:dc:9b:
eb:6a:f2:82:27:55:6c:bf:aa:b3:8a:23:25:87:56:
ee:05:1c:44:8e:40:bf:d8:fd:9a:71:55:2e:9a:39:
b5:49:c2:8f:94:83:61:24:af:11:9e:a0:62:cc:ee:
58:57:06:27:34:d9:b7:0d:c1:3f:57:62:06:81:a1:
fb:3f:4e:b7:0b:f7:36:35:ed:cd:99:02:14:a6:fc:
43:52:a3:14:d0:8b:d0:63:fb:2d:82:9e:76:e5:7e:
e9:57:7e:36:a3:59:96:aa:0c:f9:95:27:d9:50:25:
14:3f:d2:ab:77:e3:6f:48:f8:e4:de:ab:ae:15:ac:
77:93:66:28:9d:69:89:e2:21:5e:2a:f3:99:9c:fc:
69:94:15:f0:7b:19:f4:f3:b3:1b:bb:a7:1d:95:57:
b2:8e:92:d0:3b:1c:68:56:c6:52:d3:e6:8b:91:97:
1f:ed:23:55:5e:2e:25:43:7a:65:4e:5d:93:4e:63:
84:c7:95:db:f1:61:79:e2:65:9e:13:b0:6a:99:8a:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:81:13:C2:10:19:F0:A1:20:2D:3C:5A:C1:78:78:57:96:C5:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/473aeecd-b68c-379b-a7a4-40bf58dc648a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:55:40:6a:e9:a4:28:95:22:e9:95:1f:7e:c4:03:7e:f7:e5:
b5:90:17:6f:23:57:b9:dd:e5:a7:e0:12:68:19:5e:90:26:a9:
73:c2:41:c5:6f:2f:2c:bf:89:4b:ea:f8:de:c0:e8:8b:3a:b2:
44:fa:ea:f8:d6:25:e0:22:b0:85:cc:3b:49:a8:7f:8b:2e:04:
0b:f8:f4:04:62:5d:0e:19:84:41:df:47:34:03:5b:55:a7:2b:
c8:5e:c3:9c:eb:c3:40:1d:23:36:76:de:e2:f7:47:5f:08:f6:
64:ee:02:25:8f:25:48:70:e0:cc:78:9f:1e:2f:c9:be:cb:8a:
bd:1d:64:e1:2e:3d:fe:d0:9f:60:ba:f2:cd:a8:44:11:9d:87:
6a:fd:c5:54:35:49:88:2a:4a:95:f6:0d:2e:60:3d:4e:ef:3f:
b4:77:92:e3:6d:fb:e8:db:f7:fe:ab:04:b8:e0:68:d8:44:16:
04:34:ec:84:45:a9:d6:05:43:e6:05:49:be:72:b4:7b:ae:33:
d4:6e:c4:07:3f:f8:b2:2a:6d:56:cb:fb:b5:bf:61:cc:72:81:
7f:f2:ef:9f:17:13:6d:a7:40:4a:b8:ec:ac:a3:5c:5c:97:13:
7c:5a:b6:a1:45:9e:c5:43:96:0b:5c:7d:e6:c2:e5:f0:60:c3:
51:a3:d7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:15 2025 by rpki-client