Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ad0da2a-de91-3f1e-adb6-dd2d5397f771.roa
File: 9ad0da2a-de91-3f1e-adb6-dd2d5397f771.roa (raw, json)
Hash identifier: jIfbqnisLx1dBc1cRA4TF5PgvzYG9FWBKscMe823Fxk=
Subject key identifier: 0B:31:7A:27:30:00:5D:47:48:ED:E3:85:9C:27:56:16:33:FD:80:A0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C8F67677A25E452F847C0CC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ad0da2a-de91-3f1e-adb6-dd2d5397f771.roa
Signing time: Thu 02 Feb 2023 12:00:00 +0000
ROA not before: Thu 02 Feb 2023 12:00:00 +0000
ROA not after: Fri 10 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c8:f6:76:77:a2:5e:45:2f:84:7c:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 12:00:00 2023 GMT
Not After : Mar 10 05:00:00 2023 GMT
Subject: CN=3d63b6c8-e431-459e-9972-8a5ab4de09cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:17:17:8a:ff:84:f2:18:35:eb:d2:bf:83:
14:fc:82:3c:86:0b:55:54:25:dc:07:2a:b2:de:40:
77:df:d2:e4:e8:78:34:40:f7:30:0d:aa:d7:1a:e6:
84:4f:ea:bc:cd:de:ed:4e:89:20:cd:29:1e:f6:ff:
4a:e1:7f:7c:29:a0:f0:51:89:4c:9b:64:14:87:1f:
b5:e7:f0:49:66:80:86:8d:b3:a5:cb:bb:f4:8f:be:
fd:8f:8a:61:32:37:c7:05:7b:0f:d5:34:22:7f:eb:
fb:cb:b1:ce:15:7a:59:8d:d1:5a:fd:27:31:a1:14:
96:6d:90:d5:17:b0:8f:59:13:8b:86:7e:a6:e5:58:
3c:3a:d7:52:a5:a1:04:eb:b4:a6:82:fc:58:ab:39:
80:07:81:8d:4d:71:36:92:bf:68:3f:e5:9e:45:d7:
29:e3:b7:f4:70:01:0a:e9:43:01:98:ae:9b:ad:3f:
29:f8:18:b7:8c:da:a4:b4:1e:1c:aa:5d:bd:9a:6a:
64:80:e1:24:75:37:ce:f5:57:50:24:ef:e7:9b:eb:
45:9a:a1:4e:e6:6d:93:5e:20:17:f2:37:a6:70:6d:
46:75:a8:87:01:b4:69:da:ac:e9:45:39:f5:1d:71:
81:45:da:4a:f8:01:4d:4a:b4:86:45:5d:01:17:5f:
0b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:7A:27:30:00:5D:47:48:ED:E3:85:9C:27:56:16:33:FD:80:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ad0da2a-de91-3f1e-adb6-dd2d5397f771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:51:68:03:0d:17:a2:cb:b6:62:69:b2:8e:4c:22:a2:cb:ba:
6a:3f:9a:3b:e2:80:8d:c8:88:90:28:ed:f2:01:44:5a:9a:ac:
1a:01:a4:4c:77:59:79:a9:d9:b9:46:a6:17:f2:75:a3:9d:22:
99:de:5a:fa:72:01:5c:7c:35:6e:f2:7e:be:7d:b8:4f:f2:6b:
b7:c0:9a:fa:49:5a:79:af:b6:ec:e3:93:25:28:4e:6e:b6:46:
2f:3c:d7:7d:5d:48:9b:ca:fc:f0:93:2f:88:28:e2:1d:06:fa:
67:97:b0:cc:47:ca:1a:2f:b5:a0:9e:f9:4b:c2:27:46:c2:0c:
fa:78:4f:07:7d:32:c2:cd:bc:b9:8e:04:20:f8:bd:ed:01:22:
f2:66:91:d4:45:37:33:25:e1:99:98:90:2c:a7:09:af:f0:53:
df:a0:bb:75:85:fe:e2:de:bf:7a:0b:67:b5:57:e9:8d:d9:31:
55:2d:f3:d9:dd:08:2c:ed:4f:8b:7d:38:eb:60:6e:f2:b8:03:
d1:b2:3b:0e:03:b7:14:50:d2:b3:78:d1:6a:f6:9d:ce:58:fc:
ec:79:92:a9:2e:d1:ff:6f:97:3f:0d:75:bc:d2:e2:5f:32:ab:
f4:40:d9:e0:d5:bd:50:60:6f:4c:2c:ad:f0:63:70:77:ed:01:
4c:1d:7d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:29 2025 by rpki-client