Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce0d400-d3a6-3f5e-8fe3-f2ff5d7f61a3.roa
File: 8ce0d400-d3a6-3f5e-8fe3-f2ff5d7f61a3.roa (raw, json)
Hash identifier: Kn65o8X6oPNY08T9tvkjpXHfg3dvbpy+QeRYxzMkhQk=
Subject key identifier: 2B:E0:66:53:53:AD:F6:3A:5E:53:52:27:71:45:3B:17:65:B4:28:8C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E681A753A96FEDE458F2BA5A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce0d400-d3a6-3f5e-8fe3-f2ff5d7f61a3.roa
Signing time: Wed 29 Jun 2022 15:27:08 +0000
ROA not before: Wed 29 Jun 2022 15:27:08 +0000
ROA not after: Thu 04 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.164.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:68:1a:75:3a:96:fe:de:45:8f:2b:a5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 29 15:27:08 2022 GMT
Not After : Aug 4 04:00:00 2022 GMT
Subject: CN=d4811255-542e-41b6-8ebd-e11d0d384c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:e3:a7:8b:4e:00:94:5b:7c:ee:3d:75:f8:
38:c8:4d:64:a5:75:26:c4:61:0a:96:4e:11:32:88:
da:27:e2:d2:47:c2:b7:e9:df:c6:7e:a3:2d:dd:5c:
20:da:f2:78:26:df:d3:55:ff:2f:0e:ec:70:90:b1:
8d:e3:51:e5:71:e8:82:90:3d:3e:8c:12:d3:63:de:
d3:da:3e:19:de:3e:3b:d9:65:26:70:7a:8b:a5:5c:
1c:98:21:9d:f4:fd:23:33:ad:c4:cf:32:8a:ae:5d:
ae:d4:dd:b4:d2:41:e9:a6:d4:65:84:7f:6f:b4:d3:
3a:6c:1b:d2:14:50:c8:46:28:c8:72:5c:68:94:94:
40:a9:04:44:32:34:e8:de:a5:19:c7:47:7d:25:57:
a2:9d:5b:09:f6:14:93:01:e7:4e:f6:b1:fc:c0:fb:
64:4d:22:de:44:f5:3e:ea:b8:75:f9:ae:b4:3c:81:
23:73:4f:6b:97:ec:ed:6c:06:25:a1:ea:cc:e2:37:
5d:00:59:7e:47:d7:77:99:96:dc:a0:49:bd:61:fa:
05:8f:e9:2b:dd:ae:0d:54:05:d7:01:99:c5:69:38:
83:81:e9:97:c5:cc:9e:c5:76:91:47:8c:d3:61:32:
94:b2:40:23:61:6d:3d:4d:db:b7:c6:b7:66:44:3c:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:66:53:53:AD:F6:3A:5E:53:52:27:71:45:3B:17:65:B4:28:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ce0d400-d3a6-3f5e-8fe3-f2ff5d7f61a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.164.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:e3:90:d1:10:44:1f:ee:c6:4b:59:e4:c7:3e:1a:be:79:60:
32:00:c1:31:65:85:85:36:40:d5:5c:ef:c7:7d:18:77:db:cd:
f2:a4:d4:50:8e:47:79:ae:96:de:af:18:29:96:9d:6a:56:80:
1e:94:c4:2d:3f:ac:b3:7a:40:7c:5d:ba:58:fe:e1:f1:72:e6:
b9:16:65:52:bc:0b:05:79:62:f9:5a:ce:ed:43:6b:af:74:3c:
f4:21:d1:53:56:06:ce:7a:dd:b5:e2:d9:ee:38:af:80:81:f1:
00:28:f2:79:c6:89:d1:a4:40:8a:d7:fd:02:72:0b:32:75:ec:
1c:19:b4:9c:bb:ac:19:e3:4e:ea:6d:12:df:ed:f5:ea:a2:d8:
c3:d5:60:f5:e8:02:20:31:f3:4c:b5:3e:77:47:0d:2a:ac:f0:
96:2d:07:e0:5b:5d:1f:81:f1:f9:d6:02:51:24:9f:61:36:d6:
ef:9d:7f:e0:a0:b5:0b:d0:b8:44:10:87:40:db:32:4e:b4:e9:
fa:4c:1a:e2:64:6b:51:db:ef:f1:31:a7:bd:af:f7:7c:76:b5:
93:92:6b:c4:54:06:41:4f:4f:02:0b:f4:97:48:dd:0f:ed:6f:
4d:3f:88:6f:3e:e2:9c:b6:14:8b:57:53:5a:bb:e9:f8:89:bb:
cd:07:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:06 2025 by rpki-client