Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50edac24-e779-3386-8ec4-f41a8e6c5e31.roa
File: 50edac24-e779-3386-8ec4-f41a8e6c5e31.roa (raw, json)
Hash identifier: A/ii2jEH0MMIvW0r9RLDWcBaurZ0HvYOLCGb7iQAoG4=
Subject key identifier: 4E:D3:A5:99:F1:D0:6D:90:2A:03:4F:04:83:8D:D4:AA:3B:6A:8A:F0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5604C263A916C10297D39C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50edac24-e779-3386-8ec4-f41a8e6c5e31.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:04:c2:63:a9:16:c1:02:97:d3:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=82f6d85c-08c7-4e51-84be-689aa276c12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:21:05:11:e8:4a:b9:39:af:88:cb:31:9d:
6e:c0:4f:d5:a5:a4:3a:b8:d3:5d:a4:b0:55:f8:44:
06:c0:b3:88:69:35:01:87:de:a2:11:eb:b6:04:49:
37:55:c5:f6:89:89:e0:58:c3:2e:42:5b:5b:91:59:
ae:7c:f8:eb:1e:d4:aa:ea:7d:00:52:67:85:e2:2b:
5f:10:c7:c2:4b:c2:76:c1:aa:b7:f3:ea:a3:09:2b:
2d:ea:41:85:37:10:ad:bb:23:27:9e:1e:43:47:48:
e8:64:ba:9a:c3:3b:af:3b:3f:b1:78:ec:f6:64:39:
11:0a:de:b4:21:ff:69:20:7c:19:0f:1c:cd:b5:d5:
f2:df:ab:1f:da:80:c4:36:e5:46:7d:3c:37:22:df:
c1:fb:d5:aa:e5:fe:a0:e1:a9:58:38:21:c4:54:8c:
50:8f:13:f5:8d:8c:1d:16:07:2b:77:27:f2:fa:4a:
8a:6a:3d:f8:26:ef:71:75:2b:21:b0:cb:83:b5:bc:
d4:30:78:d4:21:8f:d0:d5:8d:0a:eb:e5:27:59:5b:
6e:20:88:d5:d3:1b:67:ce:89:bc:b1:43:b4:6a:8d:
37:57:1b:39:92:2f:31:ca:f8:b7:fe:f3:04:20:0d:
0c:bb:dc:6d:00:d8:07:d0:1e:6a:8a:d3:89:15:82:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:A5:99:F1:D0:6D:90:2A:03:4F:04:83:8D:D4:AA:3B:6A:8A:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/50edac24-e779-3386-8ec4-f41a8e6c5e31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:96:45:a2:f3:33:09:6c:70:c1:3b:30:85:fb:ff:ea:60:62:
c5:cd:f0:b0:5c:ff:28:a5:c7:8c:6d:59:00:c4:c4:d4:5c:dc:
cc:aa:ba:88:08:59:d4:52:2a:97:13:9c:4c:b6:a5:7d:c2:b5:
97:20:3a:85:42:64:48:51:b0:23:75:cf:3e:7f:f1:0f:ba:5d:
6f:5d:99:d3:02:e2:c4:dd:a6:fb:b9:d1:af:7b:79:71:6f:6c:
61:c4:7f:59:14:3b:8a:03:1b:4a:0f:16:d6:d2:de:f8:51:97:
82:cf:04:d9:0c:81:23:3e:c6:e2:8f:cd:a0:b0:fb:c2:73:2d:
44:fc:31:2b:96:42:ca:16:41:c6:94:ae:22:b7:2d:99:72:60:
80:26:9e:bc:46:9d:8a:5c:e9:dc:eb:f4:fe:c4:b8:a7:ae:6f:
2f:ec:0d:97:b1:31:ab:2e:8f:70:de:2e:99:b0:ee:7a:ca:1a:
b8:e7:99:1d:6b:ca:c8:b9:db:58:b1:4f:f5:d4:2c:10:d7:e1:
0e:a4:59:04:68:16:76:b9:88:c1:f1:e8:72:ea:25:b3:b0:f8:
a9:cd:d6:61:0b:7f:49:02:a9:35:e4:56:7d:a6:02:77:9a:66:
52:0e:e1:87:2b:40:46:ce:fd:9c:00:54:25:dd:a0:ef:ee:5e:
a3:9b:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:29 2025 by rpki-client