Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/689994f4-23a4-39d4-ac5a-145891f1bfea.roa
File: 689994f4-23a4-39d4-ac5a-145891f1bfea.roa (raw, json)
Hash identifier: EUbBBJzPdGlcJW6rls9VRN74o5leyq1zzgJEvZoG+RY=
Subject key identifier: 39:DF:DA:08:96:8D:FD:31:DD:9E:0F:38:22:AE:F0:5A:15:3E:7C:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC119DFEA12F9809B05ED7580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/689994f4-23a4-39d4-ac5a-145891f1bfea.roa
Signing time: Sun 30 Oct 2022 12:00:00 +0000
ROA not before: Sun 30 Oct 2022 12:00:00 +0000
ROA not after: Mon 05 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c1:19:df:ea:12:f9:80:9b:05:ed:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 30 12:00:00 2022 GMT
Not After : Dec 5 05:00:00 2022 GMT
Subject: CN=89e773ab-278d-412f-af94-789c36ab2ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:aa:e8:83:70:4b:5f:d1:13:9c:b3:be:dd:
ba:a6:3f:12:e1:5d:13:0c:fe:7f:7f:04:90:09:0f:
56:30:ad:46:53:44:34:97:96:67:fe:0f:59:7e:84:
c7:79:6d:fd:63:fd:eb:59:32:02:32:56:5d:e5:c4:
4b:9b:a3:ad:dc:6c:9f:1e:8d:24:4d:f9:97:74:13:
4c:bc:80:1e:b5:bd:f5:cc:e2:e6:d3:0f:68:f6:d8:
1d:89:01:8b:ba:76:21:31:f0:6a:f3:37:33:09:0e:
df:96:f5:ec:68:f7:9a:61:c1:e9:16:06:bd:d9:b5:
8e:fd:16:f5:07:a6:14:e2:c8:e5:60:6d:7c:86:34:
c4:ba:ab:46:3d:59:b3:e8:b1:d8:53:3d:81:6b:ed:
ce:24:5a:e0:24:18:61:47:c8:3b:52:74:8a:49:b1:
72:2b:74:72:c3:1f:b4:65:bb:bb:e6:bc:c2:b5:7f:
15:bd:07:a4:17:3f:b8:1a:03:17:90:90:c6:a6:53:
03:b2:5a:a3:f5:c1:54:b8:21:7b:56:70:99:ce:da:
d2:ee:e1:e2:57:08:8d:b0:03:58:aa:b7:b7:0c:0e:
0b:70:84:ed:08:fa:6d:71:a5:13:63:56:da:8c:be:
f1:09:a7:cf:f8:af:1a:2c:90:4e:54:ba:50:95:8e:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:DA:08:96:8D:FD:31:DD:9E:0F:38:22:AE:F0:5A:15:3E:7C:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/689994f4-23a4-39d4-ac5a-145891f1bfea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:e8:58:f9:d6:4f:e4:8b:18:e2:df:23:bf:b8:3a:3d:3d:8d:
fa:74:52:12:ea:7e:cf:44:f0:a4:05:ae:67:d4:7f:49:07:5d:
f2:90:07:3f:cc:0d:2e:68:6b:c3:94:7a:0a:22:9e:8f:31:78:
cc:72:ab:93:83:20:a5:a6:6c:f4:9f:03:18:14:f3:f0:e2:14:
c0:48:2f:41:04:cd:df:11:cf:96:f1:5c:1f:57:0e:4b:fb:a9:
17:2e:ab:49:aa:66:11:2d:b0:dc:67:9a:93:f0:8e:a9:03:78:
31:a1:bc:af:12:e0:b3:10:c4:32:0b:66:92:31:f5:9c:dd:dc:
f3:d2:30:02:c2:73:1a:51:83:4a:b7:d3:00:c5:4a:d9:e6:5f:
0e:25:f6:6a:72:b9:ba:1e:b9:06:17:4a:0f:28:74:4e:37:66:
2f:3b:48:44:be:79:70:d1:20:52:f2:34:07:be:65:7c:b4:23:
a2:3c:db:6a:0f:33:3f:af:21:74:1b:9e:c7:41:96:33:3f:fe:
55:71:7e:1e:a1:9c:71:ca:9f:23:fe:3c:45:ff:78:4c:5f:da:
4b:30:cb:ef:16:bc:43:89:f4:77:bf:83:2b:a3:f7:bf:07:6f:
55:41:7a:39:0d:f5:16:5d:28:49:ed:d2:c7:ee:d7:d2:3f:6c:
8b:32:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:34 2025 by rpki-client