Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c32409-2358-32cd-a122-f0ed308d5f17.roa
File: 74c32409-2358-32cd-a122-f0ed308d5f17.roa (raw, json)
Hash identifier: xl8qi9rfx6v/3RokPk3pIQfXzVW3MVi2Ufp+FrTQJ8o=
Subject key identifier: 52:58:0C:98:BF:59:7F:B8:54:20:32:94:08:28:09:F9:33:C9:EA:0F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840A1E128838A16B3758AF710B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c32409-2358-32cd-a122-f0ed308d5f17.roa
Signing time: Thu 19 Jan 2023 12:00:00 +0000
ROA not before: Thu 19 Jan 2023 12:00:00 +0000
ROA not after: Fri 24 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a1:e1:28:83:8a:16:b3:75:8a:f7:10:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 19 12:00:00 2023 GMT
Not After : Feb 24 05:00:00 2023 GMT
Subject: CN=0522c3fa-fad9-4a47-a4ef-bccf411a63a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:0f:cc:b9:7b:33:f0:13:f7:6f:28:a7:4e:
76:ca:70:97:f7:3c:a3:bd:98:19:54:28:8f:44:10:
f8:d6:ca:c7:89:c2:c7:44:90:e0:16:5c:47:81:9b:
33:f9:d6:40:59:ef:4f:ed:03:0a:df:bd:53:d6:9a:
f0:75:78:fb:bf:5c:56:0c:22:56:86:67:21:59:53:
87:2e:e4:73:92:5e:23:95:2f:5e:95:77:b1:47:07:
12:14:52:aa:3c:08:38:8f:84:e4:b3:10:e6:1c:0f:
52:ee:d5:da:f8:04:bc:ac:a4:75:82:d0:74:be:2f:
c9:55:8d:65:64:8b:f2:87:cf:e2:39:7d:0b:d2:3d:
cb:f9:33:08:13:08:e1:81:25:f7:56:6f:25:1a:8a:
c0:3a:aa:1a:d5:7f:b3:0e:51:7e:4f:ae:30:63:79:
6b:f9:8e:80:e9:15:b2:12:35:6d:1a:30:64:0e:ee:
83:64:3b:65:4d:50:d0:2d:b6:2a:ac:f8:d6:e8:a3:
0a:2f:53:7f:c8:a9:34:9b:53:73:13:77:94:4d:60:
fe:13:4e:33:5d:d5:25:64:66:c7:32:af:e4:10:39:
3a:72:76:a0:66:0a:00:47:fa:04:17:58:a4:e6:c4:
a5:23:6d:e1:f4:c1:6a:57:f1:b8:b5:1b:72:9b:a0:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:58:0C:98:BF:59:7F:B8:54:20:32:94:08:28:09:F9:33:C9:EA:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74c32409-2358-32cd-a122-f0ed308d5f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:db:dc:4f:ea:01:06:c6:8c:26:c8:f1:6a:2f:e7:f4:16:19:
8b:9e:42:d0:31:90:a9:7d:d4:6d:05:76:ea:0c:10:df:f0:e0:
0d:25:42:44:84:04:07:1d:41:55:69:13:dd:53:f7:24:d6:21:
d5:24:41:ab:41:96:df:5b:d0:a1:08:00:81:b0:f7:2d:38:b5:
aa:96:ff:26:68:42:a3:f8:51:11:c0:9c:df:2c:d0:96:0b:38:
d2:41:1c:e5:34:4b:9e:c9:76:77:38:e3:cc:52:28:d2:f4:39:
26:7e:ff:65:8a:34:9e:98:2c:2d:be:3d:8e:a4:cd:a1:95:c2:
f3:60:87:80:53:ac:1e:48:a9:b2:c5:1d:d3:f1:83:41:65:bc:
f6:a7:ab:9a:99:5a:5b:82:c5:90:00:1d:ff:d4:14:41:86:c4:
20:c1:d9:6a:04:76:5a:01:2e:56:75:8d:27:36:44:d7:40:2e:
13:fa:b5:5c:21:12:a9:2e:3a:26:55:5c:86:0f:e4:28:c7:a7:
0f:b3:e6:3f:55:f8:95:ce:48:73:52:6b:ad:d8:7f:0e:fc:f4:
7a:45:1d:17:3d:28:3d:12:02:b8:6d:da:e0:38:cf:93:54:ec:
26:52:e0:45:69:16:85:e7:0a:9b:18:9a:bf:78:13:85:58:7d:
4b:5d:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:22 2025 by rpki-client