Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab90659f-2042-3848-9a69-58821e47a84e.roa
File: ab90659f-2042-3848-9a69-58821e47a84e.roa (raw, json)
Hash identifier: 2IVaeyRPlNpB1qLwsBrWCg7Em+Ld3x8P4ceyAyW60H8=
Subject key identifier: 36:DC:72:04:11:04:3A:8E:4B:ED:27:11:E8:74:D4:90:44:DD:20:07
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402CC5B1A0BAAD13F941628A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab90659f-2042-3848-9a69-58821e47a84e.roa
Signing time: Thu 08 Dec 2022 18:27:08 +0000
ROA not before: Thu 08 Dec 2022 18:27:08 +0000
ROA not after: Fri 13 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2c:c5:b1:a0:ba:ad:13:f9:41:62:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 8 18:27:08 2022 GMT
Not After : Jan 13 05:00:00 2023 GMT
Subject: CN=75671ccc-4f71-44b7-b411-0e4c9da657ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5c:9a:79:fc:b2:16:1e:ee:d8:c1:6f:61:65:
b8:6d:bc:3e:9b:4e:f4:72:d3:9a:8f:ed:46:c5:a5:
61:97:7e:12:ab:5d:87:49:bd:c5:16:fd:a6:52:d4:
07:2f:d1:55:72:79:67:fc:50:ae:9f:e6:14:b7:2f:
0d:f1:96:13:49:e4:94:64:93:53:0e:be:c9:2d:77:
fc:9b:f4:4d:e4:fc:f3:65:3c:8f:f8:ac:b3:77:fd:
f8:66:8d:e2:07:2d:42:49:aa:a8:69:ea:75:7d:f2:
45:c3:b8:fb:e7:40:c2:00:45:78:0d:d4:bb:4a:8f:
8c:eb:b1:30:4f:93:7a:f1:ab:5a:f2:f7:a8:7e:ee:
b4:cd:d8:00:a7:1d:75:2e:4b:a2:b0:1c:a4:75:9a:
7b:86:3a:2f:d0:06:df:37:71:9f:d4:78:a9:e5:99:
36:ac:f8:cf:ff:4c:e8:bc:60:8d:42:1e:b9:1d:6e:
b1:21:cd:2d:e6:a8:b8:72:64:ed:25:16:7c:b0:03:
c5:0f:84:e2:77:30:2d:42:3f:87:cb:5a:2f:33:07:
11:6c:68:97:c0:4e:be:10:ff:02:4d:fc:1f:d2:e4:
f5:6c:88:9a:b5:0b:fd:ee:da:a1:2f:26:82:80:cc:
b7:bf:93:96:e6:bb:46:9b:dd:19:8d:b3:ba:df:ff:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DC:72:04:11:04:3A:8E:4B:ED:27:11:E8:74:D4:90:44:DD:20:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab90659f-2042-3848-9a69-58821e47a84e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:b6:b7:e8:ba:f5:5f:57:98:5e:13:2d:e5:64:e7:8e:c9:01:
e3:96:46:7a:81:86:84:07:28:65:d7:28:09:ad:58:eb:31:4e:
c7:dc:51:dc:51:d6:f9:f7:2f:f8:dd:f2:11:47:0c:e6:e5:89:
73:1e:59:7d:da:07:bd:4a:21:17:ba:f9:d6:cd:b2:30:00:fe:
c4:5e:e0:97:fe:ef:ad:bc:40:11:a2:76:42:e5:86:f2:82:5d:
a0:ba:49:16:36:49:7d:7f:d1:5f:80:da:02:25:b9:ac:7a:9c:
50:fd:d0:76:2a:f4:90:74:2f:db:cf:2d:d7:6b:09:b6:d6:26:
ea:5b:92:7c:a9:bf:0a:f9:f4:24:1d:01:c2:b8:46:6f:bb:b4:
c5:8a:5b:8a:00:81:f3:ec:69:6a:fd:f9:a1:21:20:0f:36:a9:
60:cc:eb:a4:e5:89:90:18:75:d5:85:a0:69:1c:74:fd:a9:d0:
3f:9a:8e:de:7b:5b:a9:c6:c0:be:37:ab:e1:de:a6:1d:96:d2:
63:5a:7b:55:4c:63:c1:ae:b7:19:45:01:16:8e:3b:3d:e5:b0:
5f:c0:68:b9:ad:bc:ba:4c:b2:64:ea:c5:2d:e4:69:c7:31:51:
47:02:6a:0a:d0:cd:e8:bd:2e:ea:d9:af:53:61:25:53:fa:17:
59:c6:7c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:09 2025 by rpki-client