Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568a8dfe-6a6f-314e-a6be-ff30cdb18a76.roa
File: 568a8dfe-6a6f-314e-a6be-ff30cdb18a76.roa (raw, json)
Hash identifier: DEpCL5KBEusY7F/NawgvjMNJIrBVBXM7ThCnHfBs0Ns=
Subject key identifier: DC:2B:E6:85:99:CD:1C:CD:C7:33:55:53:F6:5C:95:A0:80:80:31:6B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B32E76EDD45943689DAF1380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568a8dfe-6a6f-314e-a6be-ff30cdb18a76.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.164.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:2e:76:ed:d4:59:43:68:9d:af:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=6f91453a-f55e-42d0-b3ca-77728acde368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:b3:8c:3e:24:f3:18:b8:34:05:02:e8:bf:
7a:3f:54:ae:11:7b:1d:ca:2f:e2:b4:1f:22:4c:c2:
2b:75:45:f6:61:06:0e:b5:ea:82:01:b4:b1:44:3d:
b5:b3:96:b7:8b:31:f3:5d:2b:71:6d:5f:b9:07:b8:
a3:76:d8:18:4b:27:9e:9e:6b:5b:2f:56:9b:80:b8:
96:9c:db:cc:1a:96:2a:84:0f:42:d6:86:24:d5:17:
58:dc:02:da:f3:fe:f6:2a:3f:75:44:7c:c9:ef:b6:
66:4b:a9:1f:15:b1:8c:65:a3:31:39:7a:72:ee:80:
9e:86:08:96:f4:24:39:32:3a:d0:91:0d:8f:f0:b0:
d9:fa:05:b9:44:66:27:6d:fe:a6:b2:ff:07:c5:7b:
f3:c4:62:0c:96:03:e7:4e:c8:26:29:22:71:78:1d:
35:97:86:f7:12:cf:77:1d:10:43:81:c3:cf:7b:98:
78:8e:e9:60:21:5b:ab:9b:70:ee:8c:3c:e7:bf:7e:
00:4f:de:1b:dd:3e:3a:fc:84:49:10:14:b3:b1:05:
91:8c:97:63:cf:a4:cc:1d:0b:d9:55:fb:02:ec:e8:
09:f1:bb:6c:12:7e:ef:bb:7b:02:13:31:81:48:3c:
df:e4:31:01:d2:2b:cc:7d:c8:b1:bf:b1:b3:5f:5f:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2B:E6:85:99:CD:1C:CD:C7:33:55:53:F6:5C:95:A0:80:80:31:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/568a8dfe-6a6f-314e-a6be-ff30cdb18a76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.164.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:37:19:db:de:1b:ac:57:0e:a2:e1:cb:29:75:10:c0:06:a1:
f6:ba:5b:ce:74:ce:7c:af:43:d5:6d:56:cd:39:82:10:28:0e:
4f:74:06:a1:c2:bb:86:b1:81:e4:ce:1d:5c:94:34:b4:77:50:
9f:e1:f6:69:06:bf:3e:67:4b:f6:62:39:0c:af:a1:b6:95:e4:
ff:d7:71:35:7e:21:a7:0d:ac:d0:7f:b4:12:e5:ae:b5:d3:18:
c8:f0:1e:b9:c5:22:0a:36:da:30:dd:02:65:41:5c:5e:b3:65:
c5:43:47:17:ed:8c:00:b7:d7:b8:1e:f8:42:f5:27:03:d9:75:
5d:01:4a:3b:ca:da:49:01:f8:1e:84:27:b6:7e:fa:ea:80:99:
90:1d:a6:65:ac:1d:86:46:c4:bf:e1:ff:1f:5a:c2:2a:1f:dd:
3a:9c:5f:0e:ed:ad:c4:36:58:ab:58:4f:61:49:78:e1:f8:8b:
4e:e2:8a:fa:8a:b7:af:a7:ba:61:74:00:ab:ac:2a:3c:47:0d:
76:bd:bc:03:5a:b0:9e:9b:16:bc:71:5b:5c:80:b6:16:5f:03:
1f:63:d8:d8:57:a5:b6:e3:a0:96:46:67:38:c7:62:a7:26:91:
9e:40:60:f0:bd:83:cc:71:76:63:b8:d3:ed:b5:8a:c1:64:0b:
bf:e5:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:07 2025 by rpki-client