Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86b2aa6e-482b-3c8e-9078-c99a0ea1c468.roa
File: 86b2aa6e-482b-3c8e-9078-c99a0ea1c468.roa (raw, json)
Hash identifier: ntgDHbZ7urLG7Ww3VLPNEdYkf6nsCvU/W2LO9fbo7S0=
Subject key identifier: EF:F9:F7:EA:71:0E:A4:0F:95:71:8A:82:11:69:42:AC:7C:F8:34:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E40B2D8D8981274B939F97B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86b2aa6e-482b-3c8e-9078-c99a0ea1c468.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:40:b2:d8:d8:98:12:74:b9:39:f9:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=fbf78a6b-7311-46ac-bf05-8cecd2a4170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:55:f7:01:9d:b3:ff:0f:bd:5d:6c:ac:27:
28:db:36:a9:63:bd:b3:10:14:a7:f9:b5:20:c5:77:
fe:06:23:3e:73:c1:ad:c3:df:a3:d0:d1:ef:9c:50:
3b:6c:0d:3f:6b:4d:64:fa:2e:9e:fe:ad:c6:73:aa:
a0:a9:49:f6:83:31:82:bb:6f:81:af:13:c8:4a:48:
8b:cf:6f:9d:fd:57:90:2f:4f:93:45:d3:7f:14:ff:
11:f7:24:d9:2d:3c:f5:98:87:2c:02:90:6d:f4:bb:
bb:7c:dc:95:68:f2:9b:d4:e2:46:8b:b9:bc:c8:d4:
c7:98:e4:d7:0f:29:79:01:81:d8:8c:dc:b5:fe:9f:
c6:9c:77:fb:e1:b9:f6:ca:18:e8:39:25:e8:68:8d:
e8:5e:6c:3a:41:60:0b:11:df:aa:2f:e1:f4:af:a0:
1e:80:1e:d0:3d:82:18:70:27:e2:f1:bd:28:66:90:
60:33:57:12:d8:77:81:91:94:06:05:14:c1:0b:5c:
05:2e:d2:77:77:4b:ba:48:a1:e2:4d:55:20:96:3c:
64:01:f5:a2:f9:7a:fc:1b:5d:1e:41:7f:eb:f4:c1:
ed:4b:6e:f1:b5:42:1d:dd:fe:7b:0e:92:95:16:2f:
e2:6f:b2:93:64:f5:2a:d0:91:8e:0a:d5:15:28:ea:
de:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:F7:EA:71:0E:A4:0F:95:71:8A:82:11:69:42:AC:7C:F8:34:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86b2aa6e-482b-3c8e-9078-c99a0ea1c468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9a:8e:07:77:a2:e5:d2:0f:2c:35:c0:c8:76:9c:f2:02:4e:
23:11:0e:f2:da:58:60:1a:6f:ad:ac:ac:ef:ae:4e:19:fa:2f:
46:cd:c6:39:4a:ec:6e:b0:d1:7e:d7:ad:ce:6c:72:f7:eb:4e:
45:8f:17:3c:4a:e4:94:53:41:29:26:b2:2b:02:05:dd:1f:3d:
e0:f6:46:e1:18:df:d8:bd:7c:1c:92:21:58:36:61:b5:ec:6c:
6c:40:6a:29:18:c6:b6:b0:d0:a3:17:9d:c9:7c:71:9d:7a:e0:
34:be:53:8e:c3:ca:10:b8:62:cd:87:2a:5e:8a:4b:cc:4a:ce:
f9:5c:70:00:fc:83:6f:7b:17:c4:8b:8c:59:40:c1:2b:32:a2:
5c:e1:c0:cf:f5:f3:27:5b:2b:fd:e3:72:c5:51:02:30:d7:27:
e6:93:df:dd:da:f3:ed:f4:86:e3:11:07:59:e8:fa:be:92:35:
49:94:aa:10:d2:2e:26:dc:64:d0:bf:62:72:6d:9a:7b:5b:88:
c4:fd:0c:31:a3:33:6d:31:51:e8:96:17:e3:19:3a:95:24:f2:
a4:40:48:70:82:c1:87:97:36:83:e2:c6:83:08:4f:39:34:06:
d2:03:bb:5c:59:cd:6a:bc:3d:a1:9c:08:00:f0:09:ca:e8:8f:
4a:fd:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:30:08 2025 by rpki-client