Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59a503d6-e908-35c2-a256-0bb97e9d368c.roa
File: 59a503d6-e908-35c2-a256-0bb97e9d368c.roa (raw, json)
Hash identifier: dYdOSYdtm4MEdCOzi38O8RSqVtgDM87rxZFcXC6Voks=
Subject key identifier: E2:6E:7D:2D:8E:D8:93:51:E4:3E:4F:FB:69:E7:0E:18:89:45:DA:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAF58D57C39D34E1A0AD71F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59a503d6-e908-35c2-a256-0bb97e9d368c.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:58:d5:7c:39:d3:4e:1a:0a:d7:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=6505bcd1-d9f0-410a-b7f4-a1574e82e874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:04:5c:2b:ef:22:79:aa:d6:4c:d8:85:5d:
af:cc:df:97:39:f4:60:39:84:05:e4:01:54:e6:b5:
09:17:91:06:cf:51:6a:b1:34:d7:b9:3e:2f:14:1f:
b7:65:84:ee:3c:51:77:5c:cb:6d:ca:b9:c2:5c:41:
f6:40:be:d6:76:79:61:9a:21:ff:06:ac:ed:78:4d:
b6:76:f2:73:32:8d:f2:64:85:23:26:5d:78:9b:23:
18:cb:f5:a8:e9:22:f0:86:44:1b:c0:9c:a1:5b:61:
3a:21:d9:90:5e:7a:5d:6b:9d:dd:13:94:51:e7:e3:
cd:ee:dd:1f:c1:3d:16:10:b4:b2:f0:9a:61:61:35:
27:40:f3:5b:a1:6d:76:e1:85:f2:57:d1:31:90:a6:
b2:3e:47:8c:5f:f3:88:ba:6e:88:f6:4f:fc:28:0e:
b1:4c:e2:2b:41:1e:02:68:b5:eb:a1:ea:07:dd:c0:
56:7c:ab:72:b7:5c:99:9d:5c:36:31:d2:70:20:8c:
2f:6a:0c:79:62:56:1d:8a:06:21:ca:3a:c0:51:3e:
10:5c:0d:ad:39:39:83:e1:cf:a0:3e:e7:75:9b:7d:
7d:8a:17:82:ca:46:35:08:5b:54:dc:d2:bc:31:83:
e6:f3:5b:81:c0:0e:b0:d9:11:6f:94:75:eb:ee:7c:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:7D:2D:8E:D8:93:51:E4:3E:4F:FB:69:E7:0E:18:89:45:DA:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59a503d6-e908-35c2-a256-0bb97e9d368c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:0e:c9:6c:74:88:22:6c:a5:e1:b3:b9:f2:8a:28:48:79:b7:
93:fc:ed:bd:82:33:27:6b:89:97:4c:c3:55:16:a0:53:50:75:
27:3e:e1:36:31:62:c0:7e:7e:00:dc:b7:67:ba:5c:f5:29:43:
f7:66:eb:8f:86:81:b1:70:fa:9c:eb:0e:25:77:01:4d:b5:c5:
3a:72:5e:17:e4:a9:c2:1f:60:41:39:91:c4:29:3a:fe:e6:cd:
c4:51:83:ef:5e:a9:42:1c:10:2e:d1:59:b9:71:11:d7:d6:87:
f4:75:ff:49:44:a3:09:87:19:ab:bc:a1:ba:5c:06:f0:03:da:
ad:34:c4:98:29:0c:56:c7:84:4a:72:82:e2:d8:24:32:fe:d5:
3b:d5:16:f9:ef:4a:42:16:dc:91:b9:4f:30:46:fe:7d:6d:0f:
ef:b4:d0:94:e4:4a:6d:0f:e0:98:81:ae:48:b9:50:61:2e:c5:
80:92:12:93:77:07:de:4b:21:ca:f5:0c:fd:59:3a:a4:5d:c1:
e8:9d:31:bc:a2:d1:1e:fc:94:1d:a7:ff:b4:e8:2f:c5:09:fb:
a0:1a:8a:d2:72:0e:14:85:ab:08:ad:90:32:e9:c1:25:8e:aa:
77:57:f0:c9:11:8d:6a:9b:ea:e0:73:88:7f:f3:fd:bf:c5:c6:
ff:b5:51:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:27 2025 by rpki-client