Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a47a72b5-3aaa-33dc-9cfa-290f66278977.roa
File: a47a72b5-3aaa-33dc-9cfa-290f66278977.roa (raw, json)
Hash identifier: wKTBkvd6hJHN0fRayXxiVr/KWG7GRLpwWUDhbWIuI/0=
Subject key identifier: AD:67:E4:32:19:DA:2D:BB:6E:8B:01:5D:A6:6D:4D:67:7E:01:AD:CB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAF24DEB421A3D92F6C0BA400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a47a72b5-3aaa-33dc-9cfa-290f66278977.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:24:de:b4:21:a3:d9:2f:6c:0b:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=70adbfdd-aa76-4f97-b826-a3683af35f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:c2:63:bd:99:4a:94:0c:53:c3:1c:ee:69:
a9:2a:f1:a0:fe:f8:98:f8:5b:04:d9:ee:de:01:fe:
98:dd:3e:16:6d:88:5a:53:92:a5:32:7f:eb:00:b9:
25:4b:97:d8:50:1e:ef:9b:f8:74:6e:cc:2b:46:cf:
bb:1e:f3:f3:fe:90:b1:3d:c1:a3:11:c2:fc:02:f0:
43:c0:e7:d0:f9:2c:d9:d3:02:8d:c9:52:b9:10:21:
68:d4:d3:15:6a:dc:67:6a:8f:6e:96:20:21:97:de:
12:aa:f9:b9:78:73:cd:b9:30:0b:df:37:38:f7:0c:
04:2a:59:5d:ed:f9:35:97:a2:f6:26:25:c6:b4:b3:
cf:19:e3:97:2a:aa:e6:62:d1:b5:e4:5a:2a:67:ec:
63:13:7a:74:6f:89:66:cf:a1:50:dc:bb:e9:5b:c3:
f0:b9:fb:0e:54:d3:9b:0f:a4:5a:58:57:ad:3e:ab:
6c:f5:75:f9:d9:f9:61:00:7c:80:c8:e5:7e:71:30:
36:fc:40:d2:a4:e0:7a:5f:78:4c:b8:89:97:aa:f6:
b6:e9:fe:85:7e:fc:03:2f:04:d5:d1:6f:bb:44:99:
1d:5a:65:41:da:56:1c:62:5c:7e:22:ab:28:c4:d2:
80:2f:f8:c3:c6:83:ca:8c:20:ac:f5:fe:57:30:02:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:67:E4:32:19:DA:2D:BB:6E:8B:01:5D:A6:6D:4D:67:7E:01:AD:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a47a72b5-3aaa-33dc-9cfa-290f66278977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:7f:f7:23:0c:a9:02:41:65:6f:e9:66:2d:95:ab:da:a6:94:
77:d8:14:45:cd:af:76:bf:16:34:54:67:07:a3:7d:95:26:37:
69:ab:c6:b6:e1:97:e0:cb:85:0d:c6:93:e7:e2:6b:60:60:0e:
f3:c3:cb:18:2d:93:7e:a2:45:e8:48:98:09:02:8b:57:e9:dc:
c9:89:f3:f8:7f:95:8c:07:01:20:d1:ab:8b:4e:71:3f:a9:e8:
f7:0a:14:a3:4a:35:86:15:62:49:1d:21:5c:6b:25:56:7e:d3:
26:7e:c5:c1:97:d8:8a:ed:15:6e:d1:a7:2b:6d:c3:01:84:f0:
de:46:93:1e:a5:0e:12:0e:ba:88:57:60:4a:e1:0c:34:fb:46:
8a:99:86:5b:da:8d:82:99:c4:05:e7:f2:0e:05:88:75:21:c6:
17:dd:c8:17:88:35:19:ca:20:21:b7:cd:01:ee:a0:af:be:75:
a7:8d:ce:a1:6c:c1:17:73:d4:6d:39:7d:a0:88:f1:ec:30:b1:
84:f5:37:2c:1d:00:f7:f5:22:11:40:03:08:dd:76:13:65:96:
62:0e:db:62:64:f6:40:37:8e:5c:c4:01:de:49:e5:e0:cb:0a:
e2:da:20:db:ec:6b:e0:57:ba:9a:b7:f1:a9:e2:88:77:e1:5f:
a6:22:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:30 2025 by rpki-client