Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80aaf140-e02e-3acd-a4e9-68033917c6c7.roa
File: 80aaf140-e02e-3acd-a4e9-68033917c6c7.roa (raw, json)
Hash identifier: YuzQadEiYcmg7qGtFhhQYW6IamtfMKKUKdoteoy6tO0=
Subject key identifier: BA:33:DF:5D:A5:FE:EE:D1:E1:E7:F2:27:79:D6:35:47:1C:EC:B2:02
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402CC55EE5642D798C67D7FF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80aaf140-e02e-3acd-a4e9-68033917c6c7.roa
Signing time: Thu 08 Dec 2022 18:27:08 +0000
ROA not before: Thu 08 Dec 2022 18:27:08 +0000
ROA not after: Fri 13 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2c:c5:5e:e5:64:2d:79:8c:67:d7:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 8 18:27:08 2022 GMT
Not After : Jan 13 05:00:00 2023 GMT
Subject: CN=19faf361-3b76-41f1-b63a-8183462e3ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:35:42:dc:e9:cd:43:29:98:60:6c:30:8b:54:
2b:19:01:5a:03:b8:cf:06:f9:0b:4c:89:b3:4f:33:
69:92:e5:d1:80:00:f6:19:b5:c1:82:33:c2:93:e5:
94:73:87:b3:56:8c:6f:b9:96:5c:51:c6:bf:0d:68:
68:8e:f4:5f:8e:a2:7b:32:d0:a0:37:bf:cb:fe:30:
94:20:33:8f:f7:f5:65:c9:69:17:da:9f:ab:d5:bb:
ba:2b:c4:ed:59:d9:25:e3:d6:15:12:d2:58:0c:7d:
09:e3:4f:77:57:73:83:5b:67:e6:e1:3a:03:cc:24:
a0:49:0d:ad:66:3b:e4:9e:8c:c2:40:00:3d:66:66:
6f:dc:b4:c0:54:d0:23:ed:a0:c3:72:9b:4e:1b:02:
9e:c5:96:c7:f1:f7:33:16:93:d1:14:99:bb:22:1d:
b3:63:ba:e7:9f:7e:f5:25:83:4e:fb:a6:2c:3a:1c:
bd:df:df:ed:b0:98:bb:ca:f0:1d:21:9b:2e:3b:b2:
aa:bb:4a:dd:7f:3f:2b:64:86:2b:b7:af:7a:e3:a8:
fd:85:6d:21:b1:84:8e:20:cd:59:3a:21:89:5e:15:
08:c5:30:36:95:4f:96:67:ef:5c:71:77:34:13:2b:
26:3e:80:eb:c2:54:5f:c4:71:b1:dc:fe:d8:09:0e:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:33:DF:5D:A5:FE:EE:D1:E1:E7:F2:27:79:D6:35:47:1C:EC:B2:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80aaf140-e02e-3acd-a4e9-68033917c6c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:18:16:64:4c:69:9b:f3:5b:e1:f9:30:9a:ee:05:20:4f:c5:
19:12:ec:b4:98:ba:09:6f:ee:bf:60:d3:08:19:6a:4e:25:1d:
d0:ca:30:fe:51:73:08:21:56:d2:21:4d:57:79:a8:fe:da:01:
82:75:78:04:7d:8e:b8:10:30:fa:05:b3:90:d1:54:17:b9:bd:
50:6a:65:a3:cc:82:f0:72:13:56:06:0e:e5:2b:29:9a:30:dc:
2a:54:ae:e7:20:0a:9d:0d:79:26:a6:ef:78:88:9b:56:72:cb:
88:d7:a2:d1:0a:b5:41:43:af:e8:7d:a6:e4:7b:d0:fc:e1:18:
dc:ea:9a:2d:99:73:53:fb:27:7c:f8:d2:c2:95:ca:c8:69:54:
cd:35:66:36:da:43:aa:be:11:6d:a0:a0:09:a7:8a:d4:ce:c7:
30:90:fe:51:cd:e2:67:6f:c3:35:f8:2f:ea:e4:06:0d:53:44:
f3:00:cc:c7:8e:cb:68:56:43:67:ea:4e:18:96:d2:1a:cb:1a:
aa:ea:cf:1c:11:db:8f:f4:50:63:49:6d:a3:5b:a0:49:79:65:
52:56:3f:ae:2d:9a:e7:fc:0d:30:a1:e7:5e:67:2b:1e:02:56:
dd:5b:d2:0b:09:2c:fc:aa:10:50:0a:b1:c9:4e:fa:cc:7d:34:
8c:3c:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:57 2025 by rpki-client