Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ff416ed-8207-3c21-a5a0-1c85580555ae.roa
File: 6ff416ed-8207-3c21-a5a0-1c85580555ae.roa (raw, json)
Hash identifier: fg4nRTFAxxjSvE9afjSjGHn/cD/6sLfvODMhDlP+8jM=
Subject key identifier: 0B:ED:5B:A9:5B:0B:67:62:05:F7:F3:FE:1A:07:69:60:3E:AF:67:DD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840738660C3762EBBA4B1A21180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ff416ed-8207-3c21-a5a0-1c85580555ae.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:86:60:c3:76:2e:bb:a4:b1:a2:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=d2f82bea-0385-4a8f-8d54-31c6f672c270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:e9:96:95:b1:f2:ab:89:1c:76:87:49:b6:
c2:36:d3:e7:5d:22:cd:73:c1:a3:6c:ff:3d:5c:bf:
b3:71:d8:77:0d:c8:c8:88:f5:93:aa:5a:c6:96:91:
bd:56:c5:b8:5b:4b:22:98:a2:ec:30:e8:1d:f9:33:
48:0d:4e:84:fa:75:64:63:90:56:bc:06:8c:77:eb:
9a:91:e9:c8:88:4c:3a:3f:0e:26:fd:ee:da:82:1b:
1d:0f:e4:5f:58:5a:ab:7c:a6:a6:5c:bf:7a:ad:e7:
57:76:75:6e:e4:f4:2e:08:e0:98:54:ce:45:ef:ac:
47:e3:88:c7:e6:8f:42:33:fb:2f:b5:54:cb:65:5a:
72:0f:46:c0:58:c2:07:54:0f:73:a6:dd:aa:de:3f:
28:57:cd:a1:05:b1:a7:2a:44:04:d9:9d:68:ac:ce:
a4:96:b1:e0:c9:f7:06:44:f9:92:88:ab:15:f2:c0:
d1:ed:32:31:20:5c:15:ed:48:8d:c5:c2:79:7c:46:
b4:db:2e:c2:e0:5a:12:e0:9e:d7:02:ce:e6:0d:1e:
e6:47:0f:85:03:04:e5:66:b4:ee:2b:92:95:20:f2:
68:4a:01:29:31:3a:72:dc:bc:16:89:c0:59:7f:cd:
36:6b:91:0d:68:20:01:62:4d:f2:e1:84:f5:9b:67:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:ED:5B:A9:5B:0B:67:62:05:F7:F3:FE:1A:07:69:60:3E:AF:67:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ff416ed-8207-3c21-a5a0-1c85580555ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:77:28:94:a9:99:4a:2d:38:89:1e:1c:13:2d:58:fc:81:a1:
08:5d:28:ed:2c:e2:37:b8:bb:c8:79:27:81:fa:36:4b:cd:25:
00:4c:4e:ff:50:12:b0:df:a3:c8:95:dc:b7:25:4d:fa:89:34:
79:93:1c:db:04:cd:72:b3:02:3d:43:fa:9d:0b:6f:26:e0:aa:
9b:3a:e8:ee:5e:72:9e:f4:66:fd:e0:1b:9b:45:ea:f3:43:05:
56:31:f4:9a:6d:1c:1a:c7:4d:c7:32:af:ef:00:72:20:6e:3d:
2d:e0:1d:92:98:4b:64:b8:fd:43:b0:f9:2b:4f:91:7c:cb:65:
c4:c5:99:c5:1c:4a:a2:3d:ed:f6:5a:69:29:a1:70:2f:39:d1:
e7:ee:5e:f3:fb:b6:36:33:32:cf:c3:de:fc:ff:5b:2c:bd:92:
00:95:32:4b:fa:c5:2e:45:44:07:f0:5c:48:d3:53:78:08:a1:
2d:68:5e:ff:71:15:1a:1e:f2:8c:c4:f0:3c:73:a2:85:5e:10:
a8:9f:9d:13:1e:a4:ec:7a:a2:30:8a:08:3c:a1:46:73:b5:91:
fd:af:78:02:ed:c1:39:91:87:98:ef:a7:a4:f9:24:41:ec:9e:
a3:70:8a:ff:eb:16:4e:fc:3b:bd:9b:76:ac:5f:62:34:58:bf:
2a:cd:67:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:05 2025 by rpki-client