Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a31e8cd6-a66d-33d7-a710-71d0a5dad2af.roa
File: a31e8cd6-a66d-33d7-a710-71d0a5dad2af.roa (raw, json)
Hash identifier: Rj7H+nKP415YECGOhvmXGPhfmrxXcLQHkAUnXs1NHdU=
Subject key identifier: 09:1F:95:40:D8:87:83:B0:5B:E3:91:90:A4:82:22:3D:5D:CF:AC:2E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2BAB8C9E2C58387747A28280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a31e8cd6-a66d-33d7-a710-71d0a5dad2af.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.164.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2b:ab:8c:9e:2c:58:38:77:47:a2:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=8ec20ad4-ae0d-4c75-8853-be6266560bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:63:12:85:0c:30:38:60:e9:f4:61:ab:ec:
51:95:9c:db:a3:f6:d2:7d:f6:bb:d2:b3:1b:33:5e:
c6:7c:76:e3:2a:bf:26:71:78:e4:4f:d3:40:af:2d:
11:7c:f5:60:5c:85:f1:3e:c5:f7:d5:61:55:67:d7:
f8:a0:4a:81:ee:6b:fa:e4:9d:fd:fb:9e:ff:38:72:
c4:2d:8d:4e:91:87:88:83:56:c9:f8:e5:98:13:bb:
f7:20:c7:85:ab:35:5b:fa:96:7f:89:b1:86:a3:fc:
eb:af:0c:41:e2:fe:ad:f3:61:52:d1:e7:e8:86:4f:
a4:6b:5d:10:13:66:1f:40:05:44:e2:10:f1:81:84:
1f:53:b4:51:50:8c:17:f2:0f:5a:1e:20:39:cf:f1:
01:e6:7d:b2:c0:c6:70:de:96:97:9a:80:0a:7c:d8:
25:63:56:e2:80:0a:4f:5e:b8:11:88:b9:ab:8a:d9:
c7:e6:70:e0:73:2e:84:b7:b2:06:b5:4e:28:26:08:
82:df:17:c8:d9:d4:d8:0b:da:e1:cd:bd:98:0e:84:
e4:43:e4:14:bf:d8:23:f0:b1:ac:2d:d3:aa:49:3f:
5b:80:ac:f9:e0:fd:d6:1c:05:a9:af:43:61:55:0f:
49:f7:46:fa:ae:b2:c6:bf:65:e1:37:05:59:1a:e9:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:95:40:D8:87:83:B0:5B:E3:91:90:A4:82:22:3D:5D:CF:AC:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a31e8cd6-a66d-33d7-a710-71d0a5dad2af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.164.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:9f:d0:cb:14:ab:85:36:55:b0:34:36:e2:ab:ba:0e:7c:2f:
75:3c:c1:57:dd:1b:7c:d6:b0:e7:cb:1a:98:06:f6:dd:7c:2c:
7d:11:4e:35:86:64:2f:83:f4:ae:e4:8e:1d:4a:b9:e0:a7:77:
02:89:db:b4:b8:f8:b3:e1:41:93:24:82:be:f6:a9:6c:bf:8a:
9c:40:8f:c4:fe:21:74:db:ea:49:bd:61:91:c7:ad:f3:1a:6f:
65:5d:14:09:fc:0e:fe:cc:55:15:ee:d9:33:ec:bc:c5:75:d2:
c6:12:ea:31:c3:d9:2e:97:9c:a3:b3:79:30:36:ec:22:c5:72:
6f:2f:25:58:1b:30:d3:32:e2:e4:e7:04:a9:c4:57:ba:65:e6:
9d:57:db:96:5b:59:00:8a:f8:ac:df:fa:c4:e3:45:d0:9a:fa:
54:30:1d:ef:9e:08:be:fa:02:1e:07:60:12:de:35:21:bb:7f:
9c:4a:41:82:0b:a1:32:63:a7:0c:f6:a5:a9:42:e3:3e:86:15:
89:9e:79:d1:6d:3a:58:e0:d6:63:ee:30:1a:0c:00:8e:60:ba:
16:c3:c7:ca:2d:cc:e0:ee:55:c7:79:e4:e2:5a:9d:ba:c3:b9:
cf:ec:f7:75:cb:7c:2f:24:b1:91:14:ba:21:87:1c:c1:0a:ec:
71:06:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:22 2025 by rpki-client