Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70307303-b3ce-354a-9d34-dbc837b86c61.roa
File: 70307303-b3ce-354a-9d34-dbc837b86c61.roa (raw, json)
Hash identifier: u1svgzSn6m0rt99BYisw0O7kzGn8YTbveoYvELj+nvw=
Subject key identifier: 75:74:09:F3:F0:ED:AC:A8:40:AD:17:4E:76:E3:EA:4A:51:66:DD:3D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D41D63560CF021F7E465F0B40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70307303-b3ce-354a-9d34-dbc837b86c61.roa
Signing time: Wed 16 Mar 2022 04:00:00 +0000
ROA not before: Wed 16 Mar 2022 04:00:00 +0000
ROA not after: Wed 20 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:41:d6:35:60:cf:02:1f:7e:46:5f:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 16 04:00:00 2022 GMT
Not After : Apr 20 04:00:00 2022 GMT
Subject: CN=c4eb064f-ae81-4491-b070-658dff742647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bb:d3:00:64:6c:17:6c:ef:67:c6:ed:13:ab:
2e:4a:79:1a:b3:e1:75:eb:7d:0a:64:bf:e0:f3:09:
9b:03:08:7b:cf:d1:0c:55:e6:11:6d:7f:f4:21:7e:
41:06:59:49:51:09:0e:36:32:16:76:d0:d9:67:da:
fe:62:6d:6c:8c:6b:8b:b6:02:6e:fc:17:b4:db:e9:
cf:c8:30:3b:8a:6f:17:f8:4d:9d:bb:d6:f5:95:26:
73:59:d4:06:64:cd:e9:da:b0:cb:57:be:45:81:16:
93:aa:bd:28:45:33:f1:37:bd:92:2d:46:6a:af:bb:
55:f8:12:ae:87:af:2b:9b:40:c7:23:79:e3:b1:c4:
75:c6:0b:69:f9:d2:17:94:a3:36:35:e6:55:3e:27:
b4:e0:b7:40:db:ee:83:98:4b:28:39:fa:9d:ea:a1:
fd:f2:b4:e0:c7:e7:bb:21:4a:7e:67:f6:e7:91:2d:
a0:58:00:1f:f2:62:8e:24:0a:6d:dc:1e:0f:89:c3:
f3:8b:a5:2d:d3:29:fe:1d:0c:db:82:f8:dd:cd:d3:
03:c2:bb:28:8c:24:46:13:4b:56:f8:c1:b6:3c:8a:
da:01:02:8e:e6:b7:14:13:a5:b5:9d:ee:12:90:7e:
a1:eb:e7:58:a7:70:52:90:51:ba:39:64:5e:97:0e:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:74:09:F3:F0:ED:AC:A8:40:AD:17:4E:76:E3:EA:4A:51:66:DD:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/70307303-b3ce-354a-9d34-dbc837b86c61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:39:bd:63:8e:9a:60:3f:6a:38:e5:4f:e2:bd:32:85:d5:1c:
87:8f:94:0d:46:c6:ae:f7:f5:eb:c7:32:2c:29:cb:10:d3:4f:
ed:36:bf:4e:3b:86:47:e1:ad:b9:1c:f2:9d:0e:75:25:d5:ed:
81:c7:a5:f1:69:65:d7:83:e9:56:a7:e1:f7:f8:c2:d3:7c:7a:
b8:25:52:fa:b8:b7:fb:97:7e:33:6c:d4:c9:fa:cd:d0:66:42:
5a:f0:bf:19:7c:2c:d1:b6:f7:cc:a5:ad:d2:14:69:97:27:b1:
7f:3c:03:b6:88:d0:66:f4:d8:74:73:6a:81:66:1f:cb:62:47:
3d:3e:4a:43:15:f7:d8:34:a1:38:62:50:ae:bc:32:5f:61:b5:
dd:ed:fc:f1:7a:15:a4:fc:7f:69:81:2c:bd:ac:05:0c:44:f4:
d2:2c:60:2f:cb:bc:8e:c0:58:12:56:f5:58:07:d0:51:90:99:
6a:ae:7a:fe:60:30:d0:54:e7:42:35:0c:46:0f:63:20:8d:c0:
63:34:fa:87:84:c5:d1:df:b2:75:52:bf:7b:f2:24:02:39:f6:
67:5c:06:7d:df:0b:0b:fb:92:f7:32:72:70:c1:a9:95:59:37:
01:7e:bb:9c:be:5d:71:21:57:4e:8f:d1:f4:d5:67:2a:56:db:
f0:58:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:54 2025 by rpki-client