Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/789be4a5-e2b1-3e13-8126-24df5290cc7f.roa
File: 789be4a5-e2b1-3e13-8126-24df5290cc7f.roa (raw, json)
Hash identifier: dyHB8YR9pYDWSyUhhg4HCU5yywEJZm/zqDuIM6K5fNw=
Subject key identifier: 26:B0:28:1A:30:05:C0:14:7E:17:83:28:39:4A:58:F4:8F:39:23:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858407ADA75A17511DF5288912C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/789be4a5-e2b1-3e13-8126-24df5290cc7f.roa
Signing time: Thu 05 Jan 2023 12:00:00 +0000
ROA not before: Thu 05 Jan 2023 12:00:00 +0000
ROA not after: Fri 10 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7a:da:75:a1:75:11:df:52:88:91:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 5 12:00:00 2023 GMT
Not After : Feb 10 05:00:00 2023 GMT
Subject: CN=8c9cdf95-881b-4b89-8175-9035cbeb567d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:a0:73:a7:b1:49:e2:a6:ea:3f:44:93:54:
94:18:af:0a:10:f1:4f:28:d6:88:40:dc:0e:be:f0:
9d:ea:2a:f4:5a:ab:59:57:9e:50:2c:2d:27:02:b2:
d6:35:62:60:df:a7:d5:fc:53:b5:a4:d0:69:ed:a9:
52:3b:e6:1f:96:c0:c1:cb:d1:d9:e7:c2:0d:a0:72:
ef:28:86:4c:de:69:7e:aa:04:c1:50:d0:5a:d4:1c:
36:30:22:ca:96:49:06:0c:ba:2e:a1:20:fb:44:9f:
76:8c:92:97:ab:29:fc:ac:74:4c:b1:71:27:af:fe:
6c:72:ed:30:7e:f4:f9:00:77:a9:48:5f:a4:b4:90:
8e:31:74:64:74:88:68:2a:11:c0:b2:cb:b4:d3:39:
e2:68:a7:f9:36:98:b4:c4:e0:e7:9d:74:be:72:ee:
8d:bc:a2:07:78:6b:3c:3a:b4:63:32:0c:fa:8a:88:
a3:ca:8d:6e:9c:9f:8a:89:b8:a6:79:3d:e5:f9:a6:
d7:97:e6:32:d1:74:c0:98:23:9d:2a:3b:f0:4e:a8:
33:a4:ee:20:2a:1a:06:fc:13:1a:b5:70:86:03:4b:
68:b5:90:12:f4:a5:c4:20:f2:d0:93:3b:dd:dc:75:
23:89:b1:04:d4:bc:9d:7d:a5:cd:5e:13:31:6b:91:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:28:1A:30:05:C0:14:7E:17:83:28:39:4A:58:F4:8F:39:23:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/789be4a5-e2b1-3e13-8126-24df5290cc7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:38:d7:74:79:2f:6f:24:58:82:5a:05:62:c8:7c:d8:9c:bc:
b3:6e:eb:a0:a1:d5:b8:e8:3b:f4:d7:f3:4b:65:57:82:cf:1b:
6e:7c:f9:ad:c1:75:60:be:2b:9e:1c:3a:05:a4:bc:12:3e:cb:
0f:b5:39:32:e6:d8:3c:9e:6c:79:cd:14:9b:01:53:3d:94:e1:
de:9b:bd:1b:df:e6:71:19:8b:41:4e:0f:c4:f6:40:c1:66:f2:
df:f9:ab:ac:b5:59:e7:03:92:3d:3c:fe:5b:bb:1f:5e:8c:92:
29:d2:c9:97:92:b5:2f:a0:8b:d1:b9:96:ce:85:60:4b:11:bb:
31:b7:41:2e:b4:ce:47:56:af:6c:8e:35:b3:21:d1:b4:7e:94:
da:7e:7d:58:9c:f0:69:b5:2b:5c:21:e9:4b:2b:61:57:f6:ab:
c8:5c:d6:e9:11:a1:a3:90:94:02:42:65:39:71:13:ff:53:fb:
f6:cf:8a:6d:73:71:8b:0e:9f:ab:59:d4:9c:7f:17:52:d2:ac:
20:27:1e:bc:cb:af:6b:6e:db:63:4b:8a:79:e5:1a:f8:03:1a:
d1:bd:2f:f8:dd:d1:68:2f:64:bb:b5:f3:bc:45:16:22:03:a1:
5a:17:0a:77:5f:01:73:4a:1c:51:59:48:27:31:6f:4b:a6:bd:
f1:ad:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:38 2025 by rpki-client