Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/571a48e8-f357-3d68-909f-95bc0cca1809.roa
File: 571a48e8-f357-3d68-909f-95bc0cca1809.roa (raw, json)
Hash identifier: dKwcEm3Ofs6V5kowcoTkE7fQEKlcOEp51gBtlv590BA=
Subject key identifier: 15:CE:49:1D:D2:54:EC:03:F8:82:69:69:71:11:DC:D8:8E:F5:25:E2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C1A2B37C2AA0FA16A7669780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/571a48e8-f357-3d68-909f-95bc0cca1809.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:a2:b3:7c:2a:a0:fa:16:a7:66:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=d48feb56-801a-4b87-8f98-5acaa7031dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:18:f1:15:20:40:a2:71:6a:9f:d6:a2:d6:
b4:97:39:0a:8e:80:a2:ca:fb:22:62:e9:ce:22:78:
1a:25:30:6e:d1:ba:fe:c0:ee:74:58:75:27:49:da:
e8:53:7a:53:6e:29:e7:b2:ab:2b:14:5e:18:ed:c1:
f3:5b:dd:c1:5d:82:10:f5:54:a6:73:b6:58:1f:b3:
19:82:ec:5f:ad:c3:78:29:4e:91:c4:c7:36:84:12:
3a:51:36:2d:97:ba:2d:d6:ae:ea:2a:70:84:49:aa:
8e:3f:97:f7:6e:36:e5:48:51:f1:17:bc:ca:8b:15:
2f:61:f1:38:72:80:cd:4b:bc:d2:16:d2:c3:09:79:
bb:f5:a5:7d:d7:c6:85:e6:5d:d9:01:13:cc:5a:32:
f1:cd:2e:28:01:d1:2d:ea:28:0e:1a:eb:8d:56:a3:
82:ee:2a:01:59:db:86:01:7f:3f:bb:7a:77:21:9d:
12:38:17:89:0d:f5:5b:40:a0:27:5b:ad:50:ef:6e:
97:fb:8e:bf:bc:da:e0:a7:61:43:60:ca:c7:05:23:
00:99:97:27:84:56:d5:77:49:d8:8f:86:02:4f:40:
c3:c1:00:35:e0:c0:5d:4a:ae:2e:f2:db:a9:0e:69:
c5:63:30:53:23:30:3d:96:6a:64:39:9f:02:ee:68:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CE:49:1D:D2:54:EC:03:F8:82:69:69:71:11:DC:D8:8E:F5:25:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/571a48e8-f357-3d68-909f-95bc0cca1809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:61:4c:37:05:c7:a0:fd:45:55:6b:5f:a8:69:63:fc:3c:15:
73:2d:c6:f0:a3:1f:91:6f:e6:85:bc:55:b4:ad:58:ca:52:2b:
2e:a9:3c:35:c1:a9:37:6c:67:56:0f:f0:84:74:2b:9f:0e:d3:
43:10:62:77:2c:da:e8:df:19:7e:b9:77:3e:9a:bf:05:6d:95:
23:3a:14:7b:f8:16:c5:83:05:3d:95:b1:2c:46:94:64:9c:cc:
e1:45:3a:5b:99:90:d4:52:bb:bc:f3:d4:b0:e6:b2:dd:3e:55:
10:3e:43:6b:b8:02:39:88:31:d0:59:fc:83:92:d7:56:de:3d:
43:25:2a:6a:8f:c6:87:ae:c7:fe:0b:cf:98:a9:45:92:28:f0:
d3:56:4d:f9:0e:af:2f:81:e4:b0:4d:3c:8e:ae:1e:7b:27:8d:
05:c5:16:10:4f:71:cf:ab:c9:2a:6e:e4:a9:b4:36:ea:49:8f:
fa:67:8f:25:5a:72:0a:8b:90:6d:eb:00:7c:46:25:53:66:0b:
33:9f:a4:5a:0b:0c:38:a6:d8:66:b8:fc:c7:77:6c:70:b8:d7:
7c:a5:2b:43:8c:b9:f3:80:8a:13:e6:8d:6e:82:7d:61:5a:4e:
46:f2:0a:4d:d0:76:73:c6:82:21:45:5a:bb:76:ed:7f:cd:29:
92:b0:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:53 2025 by rpki-client