Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af60598c-1857-3e96-838f-2050a2cd4bcf.roa
File: af60598c-1857-3e96-838f-2050a2cd4bcf.roa (raw, json)
Hash identifier: FlTVxcrMGjWExu6jeFvtlQaiFlJbIXqfB1GbvKVI00A=
Subject key identifier: A5:AE:B7:24:AD:A0:B6:B0:E0:F3:BF:18:29:0C:37:64:13:AE:71:8F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584099CBA4BD2DFABD0E20D18B40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af60598c-1857-3e96-838f-2050a2cd4bcf.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:99:cb:a4:bd:2d:fa:bd:0e:20:d1:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=22e465b1-142a-4798-8539-18ed803204e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:41:90:1d:e6:a2:d7:bd:0a:44:3d:e2:5b:
cb:7e:af:b3:32:93:5b:9b:a5:2c:21:2b:83:0a:67:
94:f4:7d:77:11:e2:7c:b3:2d:b0:43:50:07:65:f7:
44:27:ef:fe:d2:fa:73:f5:1e:78:0a:f0:17:1c:4f:
c0:a6:8e:e8:c2:b0:1e:fe:25:c3:85:40:1d:68:78:
af:f4:bb:ab:e4:80:30:ef:1e:1a:68:44:93:28:9a:
28:74:67:b1:f2:8a:11:4c:b5:4b:3a:a6:5a:1c:cb:
b6:ea:2d:b1:a9:8d:17:21:68:5f:79:0f:31:bf:c7:
3f:74:2d:1a:69:4f:eb:4a:d0:2e:70:0e:41:5a:14:
1f:1e:4b:69:42:e4:3b:a1:37:8e:e6:90:12:15:60:
8d:e9:c3:fa:2d:a9:5e:f6:fe:a8:6a:fe:c4:d1:4f:
3e:76:18:df:bb:10:42:d5:6e:7d:1b:6e:78:8e:d7:
90:22:80:80:24:29:1f:05:f1:d4:85:36:57:32:f2:
7a:9a:8a:01:76:16:fe:70:b8:08:a9:b3:e8:68:93:
b1:ba:3e:0d:53:c5:a2:3d:9a:fe:77:30:c6:74:57:
7d:45:c6:ea:e7:c6:17:33:3b:3a:a8:f5:49:a8:82:
78:a2:98:f8:1e:10:e0:5c:a4:4f:df:3b:ec:26:c8:
7e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:B7:24:AD:A0:B6:B0:E0:F3:BF:18:29:0C:37:64:13:AE:71:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af60598c-1857-3e96-838f-2050a2cd4bcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:5a:f0:fb:d9:8f:6f:f9:21:cb:1f:f6:e4:b6:8f:aa:b5:6c:
c1:a4:3a:d3:e4:93:3a:bf:82:b7:8c:d2:c8:63:fd:a6:37:99:
25:e9:76:0c:b7:39:54:48:34:3a:9c:bf:9e:3c:00:70:08:e5:
89:05:b9:bc:86:0a:fe:29:87:48:5b:45:b0:0c:09:ba:f0:8e:
6d:51:e9:23:d5:ac:53:d7:5d:11:62:2b:bc:52:80:34:82:89:
86:0b:59:3a:0a:08:bf:ba:ca:f2:40:d2:61:bc:42:5b:64:53:
02:52:19:a7:a3:6f:b2:e0:31:26:0a:a2:e5:6a:ee:6d:d8:1e:
65:12:a4:bf:11:f0:da:87:e7:86:f0:2b:72:0e:23:44:ca:17:
05:37:47:c5:d5:0e:5a:73:75:9f:8e:72:6c:c4:cb:6c:1c:3a:
62:a0:35:97:9f:5d:99:5f:77:27:69:ae:a9:c7:3d:a7:5a:ca:
4d:f5:f5:59:ca:5b:bf:78:e3:b7:14:d8:99:ba:af:51:a6:95:
ab:b6:40:0e:80:67:6b:49:79:2c:92:75:6a:3c:98:06:86:12:
bc:34:d5:5f:6d:7b:80:e4:20:d5:8f:5d:fd:ef:55:a5:86:b4:
2b:a5:01:cb:98:b4:27:07:6e:34:1d:ff:1b:35:42:83:36:a5:
bf:47:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:55 2025 by rpki-client