Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953b152c-8e74-3e14-a1f3-8d14c65cb1eb.roa
File: 953b152c-8e74-3e14-a1f3-8d14c65cb1eb.roa (raw, json)
Hash identifier: rZQbBtwGE2penR+jdmkN+z81BS/2V91DbmaPFVsEwZ4=
Subject key identifier: 64:7B:31:BF:62:D6:42:65:C1:43:78:63:BD:CA:79:70:BD:95:3A:7F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053F8EF2E81C176B1B1F89120
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953b152c-8e74-3e14-a1f3-8d14c65cb1eb.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.195.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:f8:ef:2e:81:c1:76:b1:b1:f8:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=3fc2f7db-72e6-4e38-9556-37386a703fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:3d:8f:18:15:a9:47:db:c9:93:97:2a:82:
f0:ce:6a:df:64:31:75:ef:a7:a1:15:bc:15:68:1b:
dc:9e:9c:b0:14:35:a8:0d:c9:24:94:32:ff:2c:61:
e0:f8:1a:cc:68:1a:de:7a:bc:2f:f7:e3:b0:58:1c:
ac:10:bf:5b:e0:00:4f:34:de:09:a7:c7:e9:32:5c:
ed:78:e8:0b:d9:f3:22:6c:8c:73:15:d6:6b:14:57:
2c:30:3f:8e:0d:e3:d0:7a:47:54:f0:8c:55:49:4c:
84:bc:ce:ff:3d:9e:3c:d9:b3:c6:8c:16:82:6f:39:
7b:ac:e8:95:76:07:46:8d:47:6f:68:61:6f:a8:1e:
b3:a0:67:61:35:be:b2:7f:05:ae:fd:73:aa:50:e8:
62:41:be:21:42:25:61:a8:53:11:90:fb:b9:01:c4:
f3:bf:28:02:95:d1:f5:dc:5b:17:c3:f7:13:a5:ad:
e4:ad:4e:ff:88:be:e2:e5:d9:10:dc:8e:e1:45:d4:
89:87:c5:17:b6:63:ce:da:42:eb:45:4c:09:4f:96:
a4:93:dd:4e:1e:bc:9b:58:32:d9:19:2a:59:24:28:
d7:c5:91:ae:f1:ef:00:ee:5a:9d:a3:2e:27:42:c6:
8a:ff:7f:58:7b:88:39:cd:fb:4b:fe:e3:c2:ad:8b:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:31:BF:62:D6:42:65:C1:43:78:63:BD:CA:79:70:BD:95:3A:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/953b152c-8e74-3e14-a1f3-8d14c65cb1eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.195.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:f2:d4:a2:81:7a:5d:4e:d2:1a:30:b0:ab:83:45:ab:98:0a:
a0:8f:3d:3d:8d:30:f3:63:f7:21:87:6f:03:52:07:91:2d:dd:
09:57:56:88:d6:7c:8d:ff:26:5a:55:32:a4:d3:28:d5:69:9b:
7a:97:96:d2:e6:0f:74:a0:4a:ba:13:b2:1e:2d:c2:23:9f:58:
b0:27:df:3d:f1:fa:12:99:96:ed:2f:38:49:f7:da:7b:c2:43:
87:ed:22:4f:72:09:8b:86:4e:31:63:e2:2d:1c:04:1c:38:f8:
5e:68:b6:76:8f:5c:85:65:6e:0b:f3:c0:ed:18:60:37:86:5e:
a3:c1:c8:26:6c:84:d3:4d:5d:6c:9d:60:da:07:09:a4:1a:7f:
cd:3e:e5:1d:f4:72:6d:5d:13:ce:c3:69:b2:dc:c8:2a:b4:d5:
dc:0e:d4:8e:ff:20:d7:eb:b7:d1:dc:de:53:88:ab:75:95:b4:
38:ef:27:e3:88:6c:af:69:8a:b0:60:d0:31:b6:65:94:d3:cc:
30:fa:90:99:09:82:14:ae:70:c5:14:88:60:4c:d5:16:29:ef:
cf:6a:e0:14:2e:41:4f:13:9f:b0:69:fa:07:7c:f6:b8:8b:ac:
c1:68:64:db:cf:26:33:b0:11:2c:9f:a8:30:41:32:4a:22:36:
ab:45:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:13:38 2025 by rpki-client