Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/670e4580-77a2-3dbd-80a0-ea622f0aef50.roa
File: 670e4580-77a2-3dbd-80a0-ea622f0aef50.roa (raw, json)
Hash identifier: Lxm8q3HaWom+n/XPXwFxRdotSXeDjMABthZ6Yqs40sU=
Subject key identifier: 5D:E0:2D:B6:0A:65:ED:15:D8:E5:3A:F2:36:3B:4B:8B:0E:92:65:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F534E86DA7D0B7EFD9141AB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/670e4580-77a2-3dbd-80a0-ea622f0aef50.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.164.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:53:4e:86:da:7d:0b:7e:fd:91:41:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=a069153e-8625-4965-996e-358129d0692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:39:18:37:5d:00:a8:14:48:4d:f6:8a:c2:
4c:8c:18:aa:af:d6:a3:59:24:da:84:22:39:bc:76:
0e:87:c1:68:53:85:3c:8f:a9:e3:43:0e:05:fe:40:
0e:00:c6:f8:df:19:ad:5c:3d:bd:8d:4d:88:fb:18:
09:34:9c:dc:09:e0:63:39:cf:1c:07:bc:18:63:48:
7d:1e:1d:79:3c:6e:92:7e:07:f4:70:40:41:a9:c9:
fa:7e:c8:db:f0:2f:ef:4d:a4:76:a5:59:0c:a1:cf:
ad:a1:8a:ec:10:79:2e:30:f8:30:1c:17:dd:6b:b1:
9c:97:54:e8:2c:be:61:34:89:e0:01:8c:ae:6d:d4:
92:fc:d8:8c:1b:f3:d6:bb:0a:1b:49:77:88:4e:44:
18:32:9e:ce:a5:84:f4:5f:a9:fd:86:85:cc:5e:44:
f3:ce:84:31:32:a9:a0:7d:ae:6f:73:63:39:18:1f:
7c:b5:e7:62:f6:10:70:5c:0d:b0:df:54:23:a4:b5:
9d:5d:f2:87:dd:e4:c8:96:ec:69:f4:77:52:41:bd:
cf:f1:68:50:dc:6f:4a:34:9e:6a:49:5e:da:f0:68:
f6:0b:04:4e:61:b3:8f:84:8d:47:d1:07:59:ea:25:
db:84:28:87:60:b3:62:f2:b1:6a:e7:dc:86:8f:b3:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:2D:B6:0A:65:ED:15:D8:E5:3A:F2:36:3B:4B:8B:0E:92:65:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/670e4580-77a2-3dbd-80a0-ea622f0aef50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.164.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:08:96:65:3f:5b:91:d7:41:9f:d4:87:d4:b9:6a:e1:af:4d:
fd:fa:b9:28:65:f1:53:c6:7c:9d:b8:da:7c:73:9c:56:41:f3:
b6:7b:03:83:54:0e:20:f6:93:b3:fc:92:ec:c1:f9:0b:4e:b5:
a9:55:e4:a2:b8:9b:fd:4d:f6:e9:a3:af:1c:22:ad:fe:73:3a:
44:74:87:a0:e5:d4:0e:e2:fd:76:96:0f:ad:1a:d6:50:10:0e:
36:f9:a8:85:74:f8:fb:9a:8d:45:4b:4e:d7:d9:78:30:e6:34:
90:06:7a:54:27:80:1f:8b:93:c5:a4:34:95:eb:45:88:2d:e5:
f9:80:5f:d6:d4:ab:7a:db:15:46:c7:c2:df:8e:8c:7b:b0:84:
97:c7:a0:1d:86:d9:0b:b3:87:0a:f4:73:55:d2:9e:c3:1f:4e:
2c:40:ed:85:80:73:b5:32:76:61:d7:85:65:48:de:6e:34:7a:
3c:cd:1f:b6:dc:a7:97:f9:fe:09:bf:c8:7b:eb:4e:2c:c6:c1:
2f:bc:c7:c1:7c:75:69:23:0b:c6:39:0f:a2:04:34:d5:fe:32:
f6:46:2b:05:21:28:ec:5e:65:6a:76:63:96:2c:fe:26:c3:36:
7b:c5:88:d6:cb:7d:72:e3:08:1c:c1:f5:8c:b1:28:df:9f:aa:
01:d8:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:32 2025 by rpki-client