Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5338264-dec7-3044-9e03-d311abe0abe7.roa
File: a5338264-dec7-3044-9e03-d311abe0abe7.roa (raw, json)
Hash identifier: LIbRt8YLIyM4ID4dh6PYuFRkhaTlTu7nGPYFqgM8I7U=
Subject key identifier: F4:30:4C:DE:7B:9A:AC:86:98:B7:97:05:A4:DD:3D:1F:6B:A7:90:15
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C10616CF0F366C289ADBD080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5338264-dec7-3044-9e03-d311abe0abe7.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:06:16:cf:0f:36:6c:28:9a:db:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=3ae35202-170c-4cdb-8948-c20c2f1179a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:61:6d:8b:9a:e2:47:11:b2:e9:2e:f2:fe:
68:c7:af:50:d7:57:2b:4c:2f:f5:8d:54:c2:79:47:
d8:32:02:5f:2e:7f:2f:47:8c:06:ca:c1:c3:9f:ee:
a5:05:35:2b:32:99:89:55:5d:0b:09:5f:d7:01:da:
71:fd:bc:48:dd:e1:a9:f6:94:66:53:dc:7e:57:8f:
97:80:96:c1:7d:55:ca:43:cf:d6:d8:3f:e7:98:0d:
fb:72:67:a9:46:c4:ca:df:9a:5d:b0:60:04:03:26:
39:5e:fb:b2:7e:75:04:80:6a:09:56:9e:f5:50:2a:
ba:41:4a:36:75:cc:35:44:67:75:bf:26:b7:4d:5b:
25:c8:30:08:6a:44:ac:a2:61:19:b1:73:3a:1c:e2:
93:02:68:52:f5:13:7a:08:7f:16:50:3c:0d:2b:95:
60:2f:5b:86:e5:09:08:f8:27:16:62:07:85:bd:95:
23:72:98:de:ea:46:45:ea:f8:5b:3f:1b:48:df:88:
55:a0:fb:96:23:c0:02:2c:1d:77:0c:f0:24:e9:64:
a4:bc:4c:37:a8:ed:65:fc:56:ec:c3:db:f3:a1:58:
57:e6:48:90:c4:20:33:c0:9c:b7:46:8b:14:b9:46:
36:98:47:c8:0b:57:7a:d4:07:28:76:13:af:c7:be:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:4C:DE:7B:9A:AC:86:98:B7:97:05:A4:DD:3D:1F:6B:A7:90:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5338264-dec7-3044-9e03-d311abe0abe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:e8:c2:ff:bd:fd:9c:2c:99:fd:5d:72:0a:1f:fc:e4:51:7c:
af:31:c9:f4:a4:cc:d4:0d:4f:69:32:65:44:db:ea:ae:95:32:
dc:85:97:6f:16:6f:f4:50:1e:6a:b4:22:b0:6a:24:86:13:77:
99:0a:ac:7b:f3:b8:99:b5:ae:87:8f:ae:05:00:8a:34:0d:de:
14:9a:f3:02:71:ab:6a:de:24:45:9c:7e:3c:dc:fd:de:e9:c1:
4b:5d:5a:35:bb:d3:7b:5a:d4:c2:cd:a5:12:a9:43:4a:5b:10:
08:93:bb:6d:11:73:f9:d3:e7:04:0f:71:9e:90:51:9d:ff:a3:
c7:ce:c8:2c:20:67:18:78:4c:e3:01:32:ef:56:61:48:ec:fd:
21:d2:23:e3:78:01:47:b1:2f:a0:28:45:b4:4f:8a:fb:d8:e0:
1a:aa:1f:94:6e:3c:89:92:db:a1:29:89:ae:dc:2c:be:ef:48:
0f:a2:78:7b:51:eb:f5:a3:48:85:ed:e0:00:a8:4d:ed:69:ec:
aa:19:09:07:90:c4:65:e7:f4:52:47:22:59:88:da:bb:bf:f2:
e9:b7:73:65:0b:5e:c3:d4:9c:ff:d7:53:75:4a:2a:0d:8f:39:
9a:bb:06:1a:12:fe:2b:59:e9:15:04:9a:e8:27:97:bc:81:a2:
b8:8a:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:32 2025 by rpki-client