Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74cefdd0-7648-3178-8eb2-aea8d414f7c5.roa
File: 74cefdd0-7648-3178-8eb2-aea8d414f7c5.roa (raw, json)
Hash identifier: AHknLreF3KYns6tevyRk4F69oRCkIkJvTvVYtrVHNsc=
Subject key identifier: D8:A6:B2:E3:58:C6:25:C5:5C:EF:C3:E1:03:ED:BC:E1:40:60:9B:04
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840056D102944EA30B48D4E7C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74cefdd0-7648-3178-8eb2-aea8d414f7c5.roa
Signing time: Thu 24 Nov 2022 12:00:00 +0000
ROA not before: Thu 24 Nov 2022 12:00:00 +0000
ROA not after: Fri 30 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:05:6d:10:29:44:ea:30:b4:8d:4e:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 24 12:00:00 2022 GMT
Not After : Dec 30 05:00:00 2022 GMT
Subject: CN=c1023510-7a39-4a7f-b0c7-9dc396fd01b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:99:d9:2f:ee:fd:38:70:8b:bf:52:3f:77:
e6:81:d8:12:ae:fc:87:01:dd:c9:60:30:0c:2c:33:
c2:b7:4c:10:10:3a:11:bc:e6:04:90:b3:9c:3a:a9:
d5:ab:3d:9e:7c:0a:62:63:31:29:32:74:17:55:bf:
24:58:23:a1:74:23:e5:3b:cc:64:95:bd:b1:90:60:
f1:66:48:4e:59:f2:85:c9:73:a1:ae:0b:6d:f1:73:
75:0b:46:b6:e4:8c:82:e2:f7:43:a7:5b:11:90:95:
01:8b:fd:56:8f:20:01:d2:94:4c:41:0c:6e:d4:de:
36:dd:af:dd:2b:39:64:23:0d:88:c4:11:6e:92:c8:
bd:0e:63:78:80:5d:45:7b:bf:6d:8e:a7:71:72:c6:
49:30:99:4e:fc:cf:b2:fa:3e:57:f6:0e:11:3f:c9:
b5:24:4a:f5:9c:0e:78:b7:b7:56:8c:6b:19:4b:ca:
c0:75:9a:bf:7a:57:e9:87:86:51:a7:8a:9b:00:8b:
02:a1:8e:cc:82:fa:39:93:f3:ed:5e:f6:5c:7f:a8:
14:c7:51:0c:81:e4:f1:15:b4:a8:82:96:3a:7c:34:
3e:aa:59:6b:52:e4:43:ce:c1:8c:bf:99:70:54:9f:
f4:7f:05:1f:a7:b2:cc:9c:f1:71:c1:4d:78:74:37:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A6:B2:E3:58:C6:25:C5:5C:EF:C3:E1:03:ED:BC:E1:40:60:9B:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74cefdd0-7648-3178-8eb2-aea8d414f7c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:c5:08:d2:60:c7:e6:7c:15:74:5d:70:c0:76:a4:f3:e5:2f:
d3:d1:64:21:d0:f9:fa:b7:1d:4e:45:58:fd:95:5e:e0:71:14:
e2:8a:5a:5f:2a:65:3f:76:94:e8:51:64:62:b8:e9:10:23:e0:
ad:c7:c5:38:f8:19:fd:5a:b9:a5:8e:80:14:6a:df:99:f3:5e:
fa:55:ea:a5:a1:38:89:4e:f0:24:e9:4d:f2:ba:b7:5e:62:27:
ba:bc:8c:9c:b3:fa:ee:ae:09:52:16:6a:60:1e:c7:9e:98:20:
d2:36:8b:ac:3e:df:03:90:68:48:50:9e:e9:e8:ef:77:12:30:
e7:48:db:74:b4:f3:0c:77:a2:6e:b6:f7:8a:16:34:3b:f6:85:
ec:c5:ea:b5:c8:b7:d0:4d:a8:3e:75:91:72:5e:99:9b:bd:cf:
80:c5:6d:2d:2f:a9:4e:1e:f2:1e:f9:41:86:77:d5:fb:85:45:
e2:25:57:c8:e1:ba:c9:e5:48:80:42:af:79:65:3d:08:88:a4:
07:62:8a:aa:bf:a2:3d:18:92:2e:6e:37:b4:65:1f:ad:1c:88:
c3:00:04:d4:fc:1d:1c:8b:7f:f1:78:29:e6:1d:65:50:1b:6e:
81:72:0f:6f:6a:0f:28:c1:95:e5:3d:75:62:e0:35:1d:9b:b5:
97:3d:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:12 2025 by rpki-client