Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d261f6a-5be0-3e12-9eaa-2239f8f8ee51.roa
File: 5d261f6a-5be0-3e12-9eaa-2239f8f8ee51.roa (raw, json)
Hash identifier: G4cLFMPe0Ik2aryJRYo1oHqAr00+NdzVA2d+SDXEFhQ=
Subject key identifier: C4:80:FA:36:63:DE:69:2C:18:FA:6F:07:8A:3B:66:8F:12:19:24:63
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCF4E8824BEEA802155FE3580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d261f6a-5be0-3e12-9eaa-2239f8f8ee51.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 172.103.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cf:4e:88:24:be:ea:80:21:55:fe:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=b17b4a24-02d4-49fe-84be-b57aae8b6bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:b6:b7:53:60:80:6d:6e:36:49:d1:ca:0a:
1e:04:63:53:56:51:16:9f:b1:0e:9f:df:3a:fa:2c:
8b:7b:64:bf:0a:94:89:5d:7c:fd:6a:2e:20:7e:37:
c1:79:ad:e8:5b:a1:c4:e5:9d:82:31:54:ad:d6:80:
87:3d:f1:02:78:2f:e4:85:80:d5:17:04:10:25:09:
d9:98:98:31:81:28:4b:96:9f:49:7c:09:98:f4:ec:
6d:2c:25:f8:5a:e5:c1:e0:86:76:3c:60:b1:18:9e:
e6:9c:e9:51:14:22:2f:a2:86:b5:03:c4:4a:26:81:
36:e7:f3:22:f3:c2:9d:3b:b7:54:f8:a1:94:da:7b:
20:d4:7a:10:57:5b:f3:47:ff:d8:aa:fc:e4:30:f5:
f6:db:b8:be:c9:30:0d:02:cb:b3:32:8c:08:06:6e:
24:70:eb:6f:23:bb:f7:28:b4:aa:7b:54:7e:e5:cf:
5d:46:73:b4:e1:06:2a:ca:7b:98:06:05:6f:fa:df:
f6:ad:e2:ee:5a:69:c4:89:e7:c6:0c:7f:56:cd:82:
8e:f1:1b:d9:92:b1:0a:00:58:a6:ea:74:d5:b5:51:
8d:2f:bc:6f:38:47:21:7f:40:53:c4:34:d8:ce:58:
40:62:4d:f2:f5:c4:06:0d:7c:d9:8d:d0:0c:e0:c9:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:FA:36:63:DE:69:2C:18:FA:6F:07:8A:3B:66:8F:12:19:24:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d261f6a-5be0-3e12-9eaa-2239f8f8ee51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
172.103.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:61:04:9f:e0:4b:51:76:6f:d0:2e:0e:51:ab:bd:e2:7d:a5:
de:19:ef:49:65:fa:6a:38:1f:70:cd:c8:99:fa:97:46:e9:7d:
69:01:30:bd:f9:8a:4f:fd:88:3b:0a:fa:38:66:13:fa:e2:2d:
93:f9:80:15:10:79:0d:74:87:99:95:9c:ed:12:01:82:f3:83:
ff:97:0a:24:d9:37:57:fa:0e:45:f1:99:b3:08:ee:2f:4d:b5:
8e:bb:2a:ee:41:11:e4:c4:14:4e:71:d3:3f:11:b1:5f:cc:15:
21:0d:b0:45:e9:e3:f8:56:64:29:16:51:09:b1:14:1f:ef:14:
d7:7b:d3:7b:df:cd:86:eb:22:0d:b5:35:ec:49:5d:b1:78:94:
50:06:2b:3a:24:f8:98:7d:de:0f:b1:62:09:b9:dc:c2:e6:15:
c6:eb:1b:54:bb:60:5b:59:74:1e:85:1b:1c:c7:7e:b7:98:b1:
d4:39:69:9a:3f:7e:e7:72:bf:04:b0:6e:b2:32:d0:bc:ae:39:
4c:35:1a:f8:3b:1d:33:fc:ba:f7:d6:73:70:ec:11:d5:f1:d4:
46:ad:f1:72:87:1f:b0:44:68:60:5e:7d:68:db:70:37:d3:dc:
8b:76:58:8c:f7:cf:f3:f6:c5:ab:d0:71:9a:e5:fb:be:da:f0:
ee:c9:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:13 2025 by rpki-client