Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a81e87c3-4b9a-319c-9d86-6fc334bc8682.roa
File: a81e87c3-4b9a-319c-9d86-6fc334bc8682.roa (raw, json)
Hash identifier: Zz20ec2udpZBH/zdEV5q8lgJnV4l9ittNgnVEeClJeY=
Subject key identifier: B5:9E:F4:8C:8D:8B:C5:0D:B1:7F:34:7B:8F:41:27:7D:CD:86:69:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584075B4ADF9B14B8756F721E9C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a81e87c3-4b9a-319c-9d86-6fc334bc8682.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:b4:ad:f9:b1:4b:87:56:f7:21:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=154d32df-4a8d-465b-8b27-07d2ea0c02f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:da:e6:10:ea:ca:89:f6:40:16:ff:32:89:
15:b4:94:26:0d:ab:97:34:ce:14:a6:2b:ad:a8:77:
ca:25:b7:de:a4:f8:df:54:47:18:60:4f:21:17:ba:
52:9b:13:57:e0:c6:30:9a:88:55:ca:9f:b4:97:ab:
1c:2a:ea:f4:be:8c:0d:3d:de:07:2b:f0:e8:69:77:
e3:72:ef:c7:61:4d:7e:2c:af:a5:80:5f:97:4e:0c:
db:a3:0a:20:f2:e5:7e:86:16:dc:bd:95:4e:10:95:
7d:b0:c1:63:cc:6e:9f:79:43:d7:f6:06:9c:cf:d7:
7b:5a:e0:ca:b0:6a:fb:05:b8:db:b3:d5:33:b0:fa:
db:f1:d1:6a:52:86:e6:04:d0:05:c5:d2:f8:44:5c:
e9:44:86:a9:d8:ea:ec:81:f8:c4:88:3e:f9:65:06:
3f:ee:01:06:0e:61:fa:d6:d2:76:0b:a6:8a:7a:87:
87:2e:ae:2a:fb:3a:bd:cb:91:51:09:f4:24:e5:4c:
09:e4:47:07:76:12:53:4c:58:b8:7e:c8:bd:9e:38:
8c:49:13:a9:a4:92:8d:bb:f4:6c:a8:d3:34:a3:bb:
c9:19:07:ca:55:9e:0e:0b:ca:a6:46:35:70:0d:53:
c8:08:07:d0:94:17:5f:d2:ec:e5:6c:16:a8:b5:54:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:F4:8C:8D:8B:C5:0D:B1:7F:34:7B:8F:41:27:7D:CD:86:69:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a81e87c3-4b9a-319c-9d86-6fc334bc8682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:34:a6:c4:6e:0f:b9:f3:15:43:c1:f0:fb:e7:d9:bf:da:4e:
d0:c7:3a:5d:51:9b:8d:b5:5b:ed:a1:f7:0f:cd:8c:09:74:d7:
f9:b1:ff:8b:b4:12:f5:43:2a:82:4f:0d:46:5d:13:aa:3b:a2:
3c:9c:5b:04:b2:b4:eb:4d:36:a7:6b:c3:56:1b:a2:99:a6:f4:
23:41:42:2d:aa:c0:4e:ca:8f:fc:b4:22:29:6b:2d:13:4b:a4:
41:e3:95:0a:58:a7:f5:fb:10:c1:69:66:0a:77:bf:a4:fc:95:
5b:95:90:4f:83:f6:ae:e1:4e:c1:9f:1b:53:e4:26:5c:d0:dd:
a9:cc:44:43:de:de:f9:dd:01:d1:0f:c2:c2:a6:37:e5:b4:fc:
a6:d7:93:a4:b5:d3:d1:71:12:6f:12:53:11:47:08:17:73:45:
cf:0c:e2:1a:26:16:9b:fd:16:8b:1b:dc:74:db:96:b9:0a:49:
e7:b0:36:2c:fd:49:99:55:f4:fd:75:c5:43:db:4c:5e:0e:9b:
60:c2:f9:f0:b8:f7:77:4c:9f:bf:50:7b:28:04:09:17:94:c3:
94:8f:cc:7a:60:7a:e8:59:22:a3:3f:62:1f:d2:9e:93:2b:67:
48:34:58:5e:03:2f:33:14:35:6c:78:e3:8b:77:d3:82:d9:7f:
cd:7d:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:45 2025 by rpki-client