Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/599413d6-1131-36ac-9ac4-ea299c6bbdb1.roa
File: 599413d6-1131-36ac-9ac4-ea299c6bbdb1.roa (raw, json)
Hash identifier: RQe29mnHWUGMpe2WGk9rw7woztlKt0aH4LwqrsLmh0U=
Subject key identifier: EA:F8:FC:A0:74:B9:AA:33:AE:4C:EF:9C:C5:3A:AD:3C:1A:64:88:EF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E900F6CEC9101ABB80D527A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/599413d6-1131-36ac-9ac4-ea299c6bbdb1.roa
Signing time: Wed 13 Jul 2022 12:00:00 +0000
ROA not before: Wed 13 Jul 2022 12:00:00 +0000
ROA not after: Thu 18 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.165.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:90:0f:6c:ec:91:01:ab:b8:0d:52:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 13 12:00:00 2022 GMT
Not After : Aug 18 04:00:00 2022 GMT
Subject: CN=adc87d86-5311-4ab1-9f8c-322ed43d685e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:77:da:a2:f2:cb:c7:91:37:67:35:56:2b:
fe:d0:bd:17:0c:1b:c5:79:6d:86:b9:f5:59:10:71:
14:4d:4c:df:9f:0a:04:8c:06:fe:a1:cc:0e:6f:aa:
79:fd:95:31:b5:eb:a0:3d:00:18:a6:3f:d2:ef:25:
ba:4d:cf:ff:5e:d7:53:be:6d:ee:01:10:dc:52:c4:
86:c6:61:d9:ad:c2:d1:e5:89:f5:58:97:16:13:16:
b2:48:5a:e0:d0:5d:12:92:4d:9f:bb:62:09:0f:f3:
c2:9c:79:79:02:4a:b4:3c:eb:14:d7:23:fe:e7:a4:
79:3c:44:f1:6a:08:b1:a0:fd:80:f2:90:47:a8:c2:
78:31:87:fc:35:5a:20:c2:c7:b3:7c:6c:16:a8:42:
4e:cf:5d:62:ce:b5:c8:f9:a0:48:c1:1b:95:0d:60:
de:9b:e7:2a:85:27:84:22:a7:86:80:19:69:5f:87:
dd:2b:b4:fa:e0:6c:86:88:7d:f2:ad:aa:9c:46:ab:
99:29:f5:99:06:de:03:40:74:cb:99:98:10:bf:24:
ed:92:0e:61:b7:77:28:e6:08:32:67:b9:47:31:45:
50:f0:f5:15:6b:e1:43:f0:64:7b:fb:bf:33:63:72:
b3:12:c3:19:00:44:be:5c:55:f6:48:87:d0:21:ad:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:FC:A0:74:B9:AA:33:AE:4C:EF:9C:C5:3A:AD:3C:1A:64:88:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/599413d6-1131-36ac-9ac4-ea299c6bbdb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.165.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:26:21:da:49:b6:ee:39:9a:02:b7:16:dc:0e:7f:eb:69:c6:
33:67:ec:db:88:3a:89:b2:82:86:8c:91:a7:ef:9f:fb:a2:fd:
34:0c:db:31:24:93:3b:ac:6c:74:54:57:32:7c:43:aa:cb:bf:
e9:2f:72:6e:82:8f:c1:9a:d8:3d:ac:f1:44:dd:a5:54:d3:0e:
7f:d9:4c:3a:78:f5:ed:2b:6c:92:eb:b0:ae:d3:1a:3d:0f:40:
00:a3:eb:2b:de:12:d8:4e:04:32:d9:41:9e:de:c2:4d:16:ec:
6a:33:7b:e5:1e:de:d2:26:ae:53:ec:6d:81:2f:12:41:ed:97:
3c:0f:f3:b6:30:e1:2e:2d:e1:f6:ba:90:da:10:47:07:16:ab:
46:1f:3e:a5:2b:e5:36:34:66:bb:0e:c2:5f:31:2c:15:3c:26:
96:e9:8c:ae:61:02:3b:aa:0b:1e:82:8d:4b:08:e7:3f:aa:6c:
47:8e:57:c3:b5:36:80:22:88:f2:92:73:d5:fc:31:07:fd:7b:
ea:27:b5:01:b8:c3:1b:8f:92:0a:af:fe:f8:fa:98:ff:7b:5c:
db:96:c9:19:a2:7c:15:14:b6:09:93:c9:28:26:56:ec:ef:2e:
aa:25:1a:02:77:e5:92:f2:ae:59:4e:a7:cd:95:77:c9:98:2d:
c0:86:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:29 2025 by rpki-client