Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/676164ef-922a-375e-8739-71d5b5179894.roa
File: 676164ef-922a-375e-8739-71d5b5179894.roa (raw, json)
Hash identifier: Sy4Z7oTlB1sAentaTnagwHCIjoiU1cE8ub9ScWjibPM=
Subject key identifier: 0A:95:EB:AA:A0:55:D7:9B:27:43:F5:78:5E:AF:30:2D:65:5F:0C:D4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E4EA0DEAF8EFFC5477D766300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/676164ef-922a-375e-8739-71d5b5179894.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:4e:a0:de:af:8e:ff:c5:47:7d:76:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=16bc4f80-e063-4e9c-9bd6-0be5904c8132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:ca:11:90:70:7c:ba:49:04:fb:5a:af:a1:
f5:73:30:55:76:98:3b:f1:05:7d:44:3f:30:84:54:
4d:fa:a7:25:eb:84:ef:b3:db:bb:b8:d8:a7:1b:8f:
37:24:69:c6:ad:a7:af:e9:0f:d9:f7:04:7b:69:73:
a9:7c:3e:87:cb:0b:71:9e:45:cd:93:09:0e:a5:5a:
17:86:ee:08:2f:ac:ef:2c:f3:8a:2d:11:41:0d:ee:
df:e2:52:3a:55:a6:f3:ca:04:37:70:61:c3:c6:b4:
1c:5b:eb:23:46:91:cf:45:ec:6a:b3:2e:78:26:41:
d6:27:c8:ae:c1:53:01:a0:32:c0:a6:9c:28:c7:22:
e5:56:68:9c:d8:4b:70:64:b1:3f:7f:8e:3a:89:87:
82:2c:6b:5a:b6:05:7f:2a:38:81:9c:d6:15:33:b4:
90:b0:cb:bd:0b:db:10:2b:b2:34:fd:5a:ee:e2:82:
71:3f:7e:b7:70:28:83:cd:21:f1:5e:41:9d:7d:00:
9f:62:15:43:02:19:25:c0:a6:1f:12:72:bd:d4:52:
52:49:d3:81:8e:4a:11:78:e2:7d:fe:af:7b:12:8f:
e0:f6:7b:d4:96:c3:c6:ab:76:f4:e5:99:c8:e6:90:
5e:b0:ab:1f:17:a7:57:6f:ec:fa:ce:15:ac:02:75:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:EB:AA:A0:55:D7:9B:27:43:F5:78:5E:AF:30:2D:65:5F:0C:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/676164ef-922a-375e-8739-71d5b5179894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:ea:73:24:c4:b2:e5:a6:75:03:2a:1f:44:9f:3c:e2:2f:76:
7d:df:4c:e0:ca:32:ec:24:1c:93:24:a8:92:16:aa:2f:67:3a:
aa:5b:97:1f:23:01:94:02:39:e4:70:c9:24:04:79:18:70:60:
84:7b:9b:04:16:c4:8e:00:7f:89:d8:d1:0b:a3:5d:04:8b:d4:
90:db:be:d7:ca:d4:14:b2:30:75:03:a7:ba:bf:69:fa:1f:c9:
2d:16:d9:cd:23:9b:e6:c0:b1:c0:5b:7b:54:fd:46:f6:f1:05:
a5:bb:95:af:3f:b6:50:95:96:87:10:47:be:c5:b3:0c:b6:c3:
8b:16:81:b6:cf:3c:3c:25:d7:ce:fd:9d:ce:19:80:e3:b8:65:
68:f8:df:25:c6:b5:3c:05:8a:34:2f:3f:85:6c:f2:1c:96:d8:
44:a5:fb:b0:1f:ac:ce:48:6a:16:f1:c0:43:08:aa:af:2e:6b:
fe:43:52:1b:eb:c2:f6:65:e2:53:0d:76:64:b5:09:4e:24:5a:
96:bd:fb:59:0c:9a:37:1d:52:c4:41:f0:43:44:d6:2d:77:8f:
dd:de:e4:cb:d9:42:3b:49:f5:ec:eb:13:85:f7:34:92:37:09:
bb:8d:b6:60:ee:2c:c1:d1:76:6a:1e:fb:12:a5:b5:ef:be:d4:
58:ba:00:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:21 2025 by rpki-client