Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6578d8d6-be19-3777-8f50-64dbf94f3f30.roa
File: 6578d8d6-be19-3777-8f50-64dbf94f3f30.roa (raw, json)
Hash identifier: nmyMOVIcwYTkPhkIRtSgVjJbJN1+8oXxRhM4D2aeptI=
Subject key identifier: FF:BB:A4:DA:34:37:C5:8E:CE:42:0D:AC:02:F3:36:36:98:1C:EB:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B2FA8AB8F73713BE70529C86
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6578d8d6-be19-3777-8f50-64dbf94f3f30.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b2:fa:8a:b8:f7:37:13:be:70:52:9c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=fa744ac1-9015-4e11-9749-87caef1cdb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:5f:c2:e7:dc:58:c5:fe:56:23:85:94:66:
f8:c0:a8:f3:a1:9b:5d:bd:1d:5b:5c:37:f3:26:ea:
95:65:6c:32:4c:56:6f:59:99:09:7c:be:8d:30:8f:
57:9d:92:36:39:e1:50:d1:41:5e:1b:c6:e2:17:ff:
64:92:da:31:08:54:d9:f0:c7:96:00:46:80:67:71:
08:9d:d2:b8:9f:9d:ca:46:37:c0:e8:06:bf:64:1a:
7b:58:36:75:57:4c:37:2e:ad:cc:f7:53:e2:99:94:
aa:d7:25:71:77:94:31:7d:34:d8:38:7d:34:88:8c:
4d:54:78:6a:21:3d:7f:35:0b:6b:52:00:b9:26:9f:
90:0e:92:47:48:a4:b5:f6:40:c6:75:65:04:15:61:
11:16:06:82:94:3b:2c:fd:00:1b:9f:03:20:cb:fd:
98:a3:bf:43:03:f5:bb:4a:f2:49:9d:ae:8a:ad:93:
db:77:a5:e3:b9:18:b5:df:c0:34:98:97:ee:a2:d5:
32:87:58:5d:e2:12:14:c4:da:0b:4c:47:62:40:fa:
aa:59:27:39:70:32:ff:ee:07:5c:1a:0e:60:e3:07:
40:09:e2:76:9e:b0:dd:92:94:98:69:55:19:6f:24:
43:ce:aa:19:84:5d:49:6e:5b:87:a5:cc:99:65:a4:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:A4:DA:34:37:C5:8E:CE:42:0D:AC:02:F3:36:36:98:1C:EB:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6578d8d6-be19-3777-8f50-64dbf94f3f30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7a:a0:bf:6d:5c:5b:29:9f:43:6d:eb:e4:50:be:b0:01:d1:
ca:aa:47:b1:8f:46:26:cf:bf:a7:b1:e3:86:49:80:d1:33:15:
80:32:45:f0:f4:01:fa:aa:c3:6a:62:a0:55:21:52:87:e4:3c:
97:1b:3d:c0:60:28:4a:25:6b:aa:aa:6f:33:c7:fd:f7:00:89:
fc:1a:62:09:ab:25:e5:99:49:cb:21:f1:cc:d5:85:3e:f3:07:
a3:f6:fa:34:47:9f:cb:c4:71:7f:43:b9:1a:bc:fd:c3:15:b6:
d7:27:ff:98:0e:4a:8d:f0:9c:4d:f8:94:62:9c:6b:3b:11:7f:
c0:8b:50:56:e1:e8:64:c8:0b:59:49:87:d6:b7:69:6b:51:b2:
4f:ff:07:10:f8:e9:78:0a:38:71:94:79:59:9c:5f:2a:f8:f0:
4b:68:ff:32:c0:9b:0f:63:b2:5d:cf:1a:94:72:6a:f5:8a:4c:
c4:45:95:fa:ca:c6:01:7c:56:4a:f2:c8:49:ee:f7:79:e5:74:
79:c8:95:1e:ee:f7:cb:5e:8b:ab:a0:60:eb:42:8c:93:1d:a1:
ae:0b:5c:8e:c2:66:ab:38:cf:02:98:fd:9e:4c:ab:1b:e5:42:
81:0d:d5:0c:d5:b0:cf:94:d1:6c:a4:bf:2b:76:72:31:73:6c:
61:5b:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:35 2025 by rpki-client