Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/75df4bc6-b70c-38b9-82dd-f9befeecaa4d.roa
File: 75df4bc6-b70c-38b9-82dd-f9befeecaa4d.roa (raw, json)
Hash identifier: gMrv6FN8SD2cR8bxIQfpFif9zDrJh8Sebd6cHH6h4OI=
Subject key identifier: 2B:90:E2:F7:E9:18:5B:AF:2A:83:4D:5B:11:6C:0E:11:47:B2:90:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C106106B927EC7BD42392480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/75df4bc6-b70c-38b9-82dd-f9befeecaa4d.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:06:10:6b:92:7e:c7:bd:42:39:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=512e69c6-8516-4640-bb0b-87ebd523982e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6e:b3:b3:c5:72:dd:d0:a8:0b:f1:0d:87:99:
5a:65:1a:d2:d2:44:ac:07:6a:b3:73:44:71:00:9a:
36:66:f1:2d:c6:43:a5:9b:6b:85:fe:b3:e9:e9:8a:
28:b4:74:e8:3b:54:d9:e8:7b:a2:18:05:fd:89:8e:
af:f5:46:57:8f:7a:7a:5f:87:ed:ab:7c:bd:6e:6b:
c6:8b:0a:bc:ba:38:8c:7c:04:59:56:5c:57:a8:42:
e6:18:b6:ba:45:a4:ef:eb:42:04:22:1e:b9:1a:2c:
d4:87:39:11:a1:31:f2:f4:45:c6:7b:7a:0f:5a:2e:
98:0e:b6:0e:85:b4:01:48:7d:f4:83:94:c4:37:bf:
44:cb:25:0e:51:97:56:80:9f:71:7e:32:ec:2b:64:
0a:32:22:99:06:79:b8:5b:6e:8b:c9:4a:b7:fe:4d:
e1:77:4f:7b:db:42:27:31:09:cc:ef:d6:58:05:53:
91:2e:b5:5a:e9:35:ca:07:01:56:6e:30:b0:5f:69:
1f:03:51:8e:9b:16:5a:6f:a3:ad:1a:33:ba:e5:2c:
d5:c3:35:db:58:2a:9d:30:ab:9b:0a:cb:7c:e5:3d:
b5:88:d0:6d:ab:a2:a8:6c:1e:20:d5:d4:41:7a:fe:
af:21:d6:47:2b:6c:a9:df:11:82:6b:62:11:64:ad:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:E2:F7:E9:18:5B:AF:2A:83:4D:5B:11:6C:0E:11:47:B2:90:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/75df4bc6-b70c-38b9-82dd-f9befeecaa4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:43:68:08:6d:95:ca:56:69:71:08:8d:d8:ec:fd:cb:ec:92:
f8:6c:f7:c6:ff:e8:33:5a:14:94:ba:5b:cb:7f:44:00:35:f6:
2d:ef:9e:30:2d:c8:84:8a:34:df:68:a1:bf:48:89:8b:51:bb:
b3:fd:52:3a:49:4f:51:5a:ee:9b:62:9a:9f:94:8c:54:e8:f6:
47:21:7e:99:54:40:b5:9b:b3:a6:8a:2a:c5:46:91:80:61:bb:
7d:ab:cf:f8:1f:bb:72:8a:3b:b5:e5:27:49:d3:62:73:ec:a6:
b9:51:26:1e:6e:ef:98:b5:90:fe:82:b0:b6:6c:0f:48:03:6a:
49:97:7a:c2:22:0f:e0:af:f6:20:d3:d4:db:ff:29:3e:42:cd:
19:bd:c0:50:0c:20:0e:db:f9:2d:7e:d1:33:8b:43:8d:04:f4:
9f:e5:b9:10:72:30:af:34:26:17:70:8e:2e:d9:5e:69:c1:8a:
b8:34:ec:38:25:5f:c6:04:cf:d2:60:77:ad:9e:cd:af:f1:f5:
a7:1d:a8:bb:97:f8:a3:0c:cc:99:15:fa:e2:c2:7d:04:4b:fa:
61:d6:71:3d:cc:61:40:d0:ef:b8:b9:2b:f6:a6:aa:17:54:f7:
c0:a9:ac:52:21:ba:33:9f:b4:ce:bb:fe:eb:47:2e:36:c5:6a:
bc:34:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:51 2025 by rpki-client