Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/658e1aa9-8385-3168-94aa-b2b449073e1f.roa
File: 658e1aa9-8385-3168-94aa-b2b449073e1f.roa (raw, json)
Hash identifier: ZWLj+6OGgBHLbtUneQTWoSdh+7oi/yJ+rOp3DyYS3G8=
Subject key identifier: 0B:42:77:65:63:C0:C9:03:8E:F4:B9:58:3B:18:38:38:F4:52:96:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDE8B602110DFB88B2621DEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/658e1aa9-8385-3168-94aa-b2b449073e1f.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Fri 16 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.216.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:8b:60:21:10:df:b8:8b:26:21:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Dec 16 05:00:00 2022 GMT
Subject: CN=f6fc09ec-7c67-4130-bd57-b8b051c91638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:d8:e6:8a:d8:20:6e:0f:2a:0e:4d:1c:48:
e9:26:93:b1:1c:1f:4b:30:67:a9:37:86:59:d2:aa:
52:c2:b4:73:90:30:f7:15:59:45:4b:40:6b:b5:63:
41:4e:32:cd:f7:84:60:00:f2:0f:e6:87:32:ef:59:
6e:0e:ba:fc:e5:d7:15:53:e9:2e:55:be:10:25:43:
d2:17:fa:ae:ba:5b:a6:ef:81:29:60:ab:69:67:31:
2a:f2:76:6b:db:83:18:0e:00:ea:54:c6:41:8c:b7:
43:ff:5a:7a:e3:b6:4e:54:58:15:a0:21:ff:49:57:
88:a8:66:6f:69:2f:17:d3:4e:e1:ce:64:9c:bc:ce:
3d:aa:b4:0c:5d:37:c7:e8:43:2a:41:d7:79:18:95:
46:55:b2:cb:ce:52:7e:71:97:a7:b1:56:34:0f:f3:
e9:94:fd:df:a2:d2:f7:ee:dd:06:fe:ce:52:a3:e9:
29:6c:e9:88:ff:bf:33:b7:5f:d4:34:cd:a3:e7:49:
f6:e5:f9:c2:aa:ee:ce:18:a2:0f:b2:d3:1e:ee:f6:
51:a9:2a:05:1e:28:ee:b3:9c:77:ed:eb:87:14:1a:
d1:45:a6:00:58:0e:e6:c9:bd:39:40:8d:a2:8d:4d:
a5:7d:a2:ee:de:f7:e6:0d:8d:c5:d1:a8:7a:c7:69:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:42:77:65:63:C0:C9:03:8E:F4:B9:58:3B:18:38:38:F4:52:96:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/658e1aa9-8385-3168-94aa-b2b449073e1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.216.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:a4:0c:9a:ad:62:b0:e0:c5:8c:f5:87:6d:53:b9:6d:4d:17:
f2:0f:94:f7:7b:f2:8f:6b:47:99:3a:f2:84:5d:5b:88:67:27:
3e:8a:7b:22:2b:34:30:01:5e:e6:65:08:62:0e:00:cf:b9:a4:
85:ee:f7:f2:9a:e5:a8:8c:4f:25:18:14:02:93:d1:ad:28:33:
1c:cc:5d:96:80:f2:1f:a7:51:19:e9:00:0a:36:d3:10:fb:68:
ac:b9:3a:64:7a:76:43:49:8f:16:e1:a1:d0:50:e3:60:d6:30:
92:cc:19:f3:b5:ec:ca:20:ef:ef:94:76:77:b8:54:e6:98:ab:
f4:5b:d1:b2:2f:cf:d1:54:00:65:6f:52:72:ea:c6:4c:e6:4b:
32:20:df:21:5d:f8:3c:c9:3b:46:50:c8:28:a0:18:4e:e2:9b:
a2:83:5f:83:26:d7:2b:ab:25:c3:32:cd:49:20:19:77:71:c5:
59:d5:da:6a:87:53:11:c9:db:76:e7:15:e8:6b:0d:e0:6d:5e:
be:c3:c4:b4:e8:b6:9b:04:87:62:d2:34:aa:69:29:c1:d3:09:
97:54:12:48:97:c9:11:a2:3c:70:42:9d:4d:e1:6a:ab:fa:81:
9f:90:7c:2b:56:df:e4:b4:de:15:ea:60:43:93:b8:0e:f9:54:
03:43:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:42 2025 by rpki-client