Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/551abe38-ca42-3d00-a3ce-9487bad8a168.roa
File: 551abe38-ca42-3d00-a3ce-9487bad8a168.roa (raw, json)
Hash identifier: TJSVIBcJFWQApD+PjkaoD8w8aBP8ujnzuNYRXXOHqIY=
Subject key identifier: D4:B2:FD:04:13:FF:11:F3:25:BF:7B:3E:B8:B5:FD:3E:EB:89:5A:A2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F3E4F76994F5080000AE48414
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/551abe38-ca42-3d00-a3ce-9487bad8a168.roa
Signing time: Tue 13 Sep 2022 12:00:00 +0000
ROA not before: Tue 13 Sep 2022 12:00:00 +0000
ROA not after: Wed 19 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3e:4f:76:99:4f:50:80:00:0a:e4:84:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 13 12:00:00 2022 GMT
Not After : Oct 19 04:00:00 2022 GMT
Subject: CN=6a754283-95e9-44bf-b8a3-965b1195245a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:38:8a:2d:c7:17:fe:c6:3f:bd:76:9b:07:
4c:94:3c:86:bf:d2:66:b5:39:07:0a:bd:a9:d9:38:
50:4d:bc:52:f0:f4:2d:1b:04:bc:b2:c1:eb:1d:96:
45:90:b7:74:fd:4a:c7:ff:20:bb:7e:28:da:a7:39:
14:88:20:89:70:3d:bf:2c:58:53:7f:6b:1c:77:27:
b2:16:bc:1f:8a:c8:d1:26:a6:19:0f:8f:57:19:3c:
eb:03:42:0d:21:7f:99:a5:b5:9c:50:b4:ee:3f:c9:
0c:c4:97:ce:08:16:71:1c:96:41:79:a1:99:9e:11:
1c:f7:25:c6:92:76:d5:2b:43:49:d9:b1:76:9e:54:
92:aa:97:a3:18:80:94:97:da:eb:82:57:fc:9c:e7:
88:41:8e:1e:c5:a4:94:af:45:3f:8d:49:d5:ca:b4:
ee:a1:5b:7d:db:7f:64:82:82:dc:d6:fa:d3:90:c7:
de:e4:c7:d2:aa:8a:f8:e0:5f:ba:56:8a:d1:f7:7c:
e3:b4:40:01:9e:ed:3e:83:54:cd:87:7f:e4:70:ce:
fd:c2:28:7a:a8:4c:e9:e4:de:2f:41:51:38:ef:b6:
d7:a4:20:ee:52:94:9b:36:a7:c5:f7:5b:ac:13:eb:
ff:c0:95:d7:13:f5:60:54:1a:1c:c8:a3:32:64:f1:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B2:FD:04:13:FF:11:F3:25:BF:7B:3E:B8:B5:FD:3E:EB:89:5A:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/551abe38-ca42-3d00-a3ce-9487bad8a168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:05:25:8c:66:59:74:0a:8e:88:33:77:d7:06:db:70:ed:41:
64:ff:6b:dc:0c:c6:de:07:9a:e4:8d:ed:5e:e3:4f:f5:cd:43:
79:54:df:16:38:4b:80:a4:89:e5:d0:52:26:43:49:ec:26:57:
e2:05:73:b3:1d:d3:b3:26:16:fe:94:c4:32:68:66:c7:fd:8d:
72:56:8c:18:9e:e6:1f:6f:ab:cc:73:4a:23:b0:a6:15:7c:7a:
08:5a:49:0b:8f:ae:b3:4a:b0:af:ba:22:9b:84:78:12:24:0b:
98:7f:3b:61:71:69:5c:df:a8:3e:f9:26:2a:c5:78:db:69:60:
ae:26:75:79:d9:b1:ac:42:24:8a:1b:fa:85:4a:74:aa:e8:4a:
b3:d2:a5:62:1b:bf:35:f6:34:94:98:56:48:6c:06:0b:dc:15:
96:f6:a4:f1:09:45:2c:eb:62:7d:c4:1c:8f:49:88:06:4a:47:
1b:f5:a1:28:9f:2d:55:27:60:61:51:ff:a8:0b:0f:4c:5c:0a:
a0:c1:b9:12:6e:2e:1c:85:a0:18:ec:24:d7:8d:95:9f:b5:cd:
f4:8d:11:46:df:1a:26:17:e2:e8:79:dd:bc:c4:c1:d2:e2:eb:
63:e9:d6:eb:e6:e7:f5:2c:be:fc:02:90:c0:ad:ad:a6:c5:de:
96:e7:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:11 2025 by rpki-client