Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91990ae3-481e-3ae0-ac6b-f3bfb70b8651.roa
File: 91990ae3-481e-3ae0-ac6b-f3bfb70b8651.roa (raw, json)
Hash identifier: +ahBW4m/UUc043cOfFrS33G5x3XDF4B5mP9Xu/LXWak=
Subject key identifier: 1A:38:2A:88:62:08:05:8F:B5:1F:1A:95:95:45:B6:64:1C:6C:D2:A6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F72F626B2A6B8544DAD9FE100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91990ae3-481e-3ae0-ac6b-f3bfb70b8651.roa
Signing time: Sun 02 Oct 2022 12:00:00 +0000
ROA not before: Sun 02 Oct 2022 12:00:00 +0000
ROA not after: Mon 07 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:72:f6:26:b2:a6:b8:54:4d:ad:9f:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 2 12:00:00 2022 GMT
Not After : Nov 7 05:00:00 2022 GMT
Subject: CN=c47661ba-f216-4171-999b-d758bbf36805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:1a:6c:89:41:19:f9:fe:c2:4b:0f:f1:0e:
5f:0c:bd:4f:71:80:f1:d7:9f:db:de:14:a8:e4:80:
ab:75:8e:bd:66:45:6c:9a:8f:6e:1a:ea:b5:73:9d:
49:52:13:fe:df:ec:e6:b2:03:db:ee:44:5f:59:4a:
51:cd:f4:e8:31:23:f8:fe:cd:9c:c1:01:8d:0f:2d:
49:bc:9a:ee:e9:46:c9:0d:c4:36:4d:06:aa:0c:36:
d3:0f:81:c5:eb:8a:e7:73:03:d3:bd:25:1a:77:bb:
d2:48:51:74:92:5f:ac:05:08:6c:ac:bf:76:be:ec:
28:c6:e4:fa:98:d2:b1:ad:be:f8:0a:8c:65:42:2c:
ca:61:bd:a0:f5:43:4e:5d:e8:02:be:42:81:32:ef:
50:2a:5d:d7:2d:b4:17:8b:28:9f:15:07:55:19:b1:
fa:52:3b:a0:f2:b2:22:af:bd:80:0b:76:f8:c9:bd:
79:14:be:1c:f7:56:d4:eb:42:00:df:9b:3f:7f:2a:
9b:d5:0e:b0:e3:a3:f3:24:13:84:1a:ad:ee:fb:8b:
89:6b:93:2c:27:89:2c:1e:9a:80:be:55:68:e9:51:
a9:8b:3d:f2:f5:56:b5:d2:f8:a5:b5:40:cb:95:07:
eb:1e:98:0e:76:e3:47:46:fa:e0:81:69:8f:9c:77:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:38:2A:88:62:08:05:8F:B5:1F:1A:95:95:45:B6:64:1C:6C:D2:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91990ae3-481e-3ae0-ac6b-f3bfb70b8651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:3f:7b:b6:57:ae:fe:b0:ba:4e:6d:94:d7:b9:bb:f4:eb:2d:
f3:9c:67:f6:09:96:7b:c9:0d:6d:91:c4:67:43:4e:a4:45:ef:
aa:d9:b8:9b:5b:ff:e0:91:e9:06:e5:da:13:69:cd:20:30:45:
50:4e:63:ea:49:f0:cc:3e:5a:b5:a8:3a:5c:78:fe:49:a9:90:
3a:c4:ff:e9:74:d2:03:26:9e:ac:ec:ac:6a:27:56:03:56:72:
0f:e6:8b:22:52:2a:8d:87:aa:2e:50:dc:c7:00:ab:95:dc:78:
2f:40:a4:77:2c:9b:d5:08:d6:26:77:21:88:e4:c8:1c:f1:24:
f8:9b:7a:99:19:99:3b:7f:1b:9a:ec:d0:77:82:ff:8e:3b:dd:
5a:22:df:c6:ed:45:36:bf:1f:f7:b7:ee:fa:a0:56:c2:c4:a7:
6a:d6:f1:2e:df:50:e9:f2:32:08:b9:f3:a0:97:29:54:9b:8a:
82:29:fe:f5:c9:12:66:fb:90:70:11:ef:cb:e0:fe:bb:84:d5:
de:a0:d0:7c:44:0b:bf:a4:c9:08:5b:37:35:3e:08:96:30:2c:
7e:54:dc:57:23:23:e5:f2:86:99:3c:60:f3:83:fe:44:f5:e7:
f4:ee:54:de:6a:27:3c:fc:e2:4b:8e:c8:31:15:1d:84:c8:a7:
fb:82:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:02 2025 by rpki-client