Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98a2e440-9bd3-3cf0-bdc1-9caca1e9e3b4.roa
File: 98a2e440-9bd3-3cf0-bdc1-9caca1e9e3b4.roa (raw, json)
Hash identifier: 9kI4z117QozwMZx/+uCnmE2FSIZ/wnSVnbDg8inamno=
Subject key identifier: 5C:4A:72:3E:37:9C:D9:98:24:27:5A:14:49:7B:8D:BA:D1:7D:FC:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDE5770AC1F265E95BC33C980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98a2e440-9bd3-3cf0-bdc1-9caca1e9e3b4.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Fri 16 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:57:70:ac:1f:26:5e:95:bc:33:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Dec 16 05:00:00 2022 GMT
Subject: CN=6c74f20d-25db-4c12-88a0-9b4edb46d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:0b:a3:2f:81:83:87:21:9d:f4:f4:1a:a5:
6a:15:c7:be:fb:e6:05:8d:4b:ca:4f:76:1c:f9:b2:
41:c2:62:c8:8e:dd:fd:df:ce:5e:dd:36:82:b7:c0:
dd:c7:74:a0:ad:b7:cc:eb:8e:77:70:a9:9f:24:8a:
c1:96:c2:35:a9:f9:72:04:a8:69:9f:f4:b6:c4:bb:
93:c7:79:fa:8e:0f:1b:01:b2:3b:9f:1e:44:9a:c5:
a9:5b:3d:0b:df:58:63:b5:82:1a:1c:bc:a2:79:59:
26:d0:20:96:d5:1d:66:b7:85:1a:4e:6c:9f:40:54:
ef:18:61:b0:c5:4e:13:c6:73:9b:ab:cd:86:f5:fd:
bb:05:8f:21:84:af:50:a5:09:cd:71:b3:3b:20:d1:
1e:ab:6d:fc:80:a7:d0:e5:e4:d3:46:d0:44:f3:17:
96:e8:9a:ed:ac:75:7a:11:86:2e:a1:e1:df:5c:ad:
e9:97:bd:9b:2f:b2:a6:1a:14:49:cd:ee:55:f6:5b:
66:c6:05:1f:ae:1d:53:ac:31:fe:00:98:d8:76:d5:
8c:74:81:f3:70:de:e9:c4:8f:db:41:47:73:48:1b:
d9:c0:f0:8c:25:12:5d:4b:de:9a:82:9c:67:a5:fe:
52:0a:89:89:f9:d4:eb:76:0f:fb:cf:1f:9b:ae:52:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:72:3E:37:9C:D9:98:24:27:5A:14:49:7B:8D:BA:D1:7D:FC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98a2e440-9bd3-3cf0-bdc1-9caca1e9e3b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:dd:a3:4b:f5:53:86:b3:47:9b:6f:f9:d4:5d:cb:e2:0d:78:
fa:26:73:0e:09:9f:c5:b3:9e:db:5c:33:5f:4f:f5:91:9c:92:
91:06:2d:66:d0:f4:ac:b1:b8:8c:4b:c6:76:af:2b:b0:d7:6d:
da:b6:c0:40:39:cf:9e:72:be:04:dc:63:25:ca:02:58:36:6c:
76:16:80:17:59:be:66:dd:f3:c8:73:e4:f8:12:4d:8d:d2:7d:
b3:2d:94:30:f9:79:c8:96:33:f4:86:b2:d8:8b:e7:d9:3e:d9:
8a:a3:94:5d:ba:65:fe:1e:61:09:d8:74:f6:0a:a6:88:f4:62:
39:63:51:fe:3f:37:67:42:d7:a7:db:50:41:ca:bf:03:19:da:
38:78:db:f4:2b:5e:b1:c5:49:35:eb:6c:72:cc:53:53:5a:4b:
38:3e:18:7a:68:69:ce:2e:fe:8d:a9:8e:0f:0d:63:09:47:fd:
4e:14:45:1e:81:11:ef:e6:ab:a4:ca:2a:8d:a9:ff:f1:eb:35:
7d:bd:95:fe:0b:10:5c:0a:84:c7:54:6e:64:cd:53:03:b7:2c:
39:04:3f:17:c1:22:c4:ac:3c:49:a9:9a:5a:32:d6:cc:49:9f:
ea:65:f8:b3:87:19:3c:f9:ce:4a:4c:08:c1:c7:da:c1:af:cc:
ce:8f:1c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:22 2025 by rpki-client