Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af900e63-4c50-3f4d-a362-7c0fc2a34d20.roa
File: af900e63-4c50-3f4d-a362-7c0fc2a34d20.roa (raw, json)
Hash identifier: sac4iTZYxPxcV7qv136Im2GiUcjs0EU9LiTdtU2oGRg=
Subject key identifier: 04:9E:70:1B:3F:BF:16:E1:69:99:B0:DA:DA:02:2E:12:93:8D:CF:F0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EA1DB5858B880A6A608096000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af900e63-4c50-3f4d-a362-7c0fc2a34d20.roa
Signing time: Tue 19 Jul 2022 12:00:00 +0000
ROA not before: Tue 19 Jul 2022 12:00:00 +0000
ROA not after: Wed 24 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a1:db:58:58:b8:80:a6:a6:08:09:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 19 12:00:00 2022 GMT
Not After : Aug 24 04:00:00 2022 GMT
Subject: CN=b7d2a794-debc-43fb-acb8-385f982894c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:65:95:82:13:03:22:05:20:45:d7:a8:03:1c:
69:f8:6d:92:01:fc:20:84:5d:9f:35:17:f1:4f:a6:
35:2e:c4:da:9d:7d:51:3d:2f:27:2f:eb:f1:0f:3a:
df:91:9b:82:ab:93:8e:a9:6a:3e:b3:01:92:a1:67:
66:b4:88:01:3a:a0:81:49:a8:b7:cf:1a:93:ec:c8:
67:66:27:03:79:30:76:8a:39:21:28:32:5b:b0:ab:
99:a8:70:8b:6f:64:62:d4:f4:42:22:f0:eb:f2:b6:
8b:19:db:36:55:32:c3:e1:64:aa:97:e3:cf:3a:6b:
d0:48:b8:03:13:e2:bf:5d:3a:b0:6b:a7:4f:61:e3:
6b:d1:07:c2:63:1d:45:4e:08:6e:87:ee:51:5d:8a:
35:d8:33:fe:2a:67:2a:2b:15:f3:84:f4:90:fc:6f:
6b:0b:66:cb:50:29:1c:2a:4a:18:f0:2a:ea:41:4f:
71:06:51:26:6a:a8:46:ec:35:da:37:1f:92:01:58:
22:0a:b5:55:d7:2a:8e:0b:f1:f8:b3:72:b8:b6:40:
17:c6:33:9e:44:64:12:d4:ab:6c:03:78:6c:d2:a0:
a0:5c:e6:6f:83:55:49:7d:2f:95:ce:25:4d:ee:c0:
b4:c1:2d:81:73:6a:f4:c0:88:94:7c:8d:8e:5c:be:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:70:1B:3F:BF:16:E1:69:99:B0:DA:DA:02:2E:12:93:8D:CF:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af900e63-4c50-3f4d-a362-7c0fc2a34d20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:cc:12:9f:01:9e:10:5c:14:94:0f:20:60:d6:0d:25:74:d0:
cf:95:fc:ed:24:7b:0a:67:07:b4:2d:3a:41:96:ca:da:51:5d:
cc:23:66:1e:bb:fd:a3:58:75:bb:7d:84:6b:88:2c:57:65:98:
11:60:bf:72:e7:e5:3a:8f:98:e0:e2:ad:21:ff:c1:42:8a:80:
14:fe:6b:d7:6b:61:2d:df:60:ee:bf:4f:2a:01:b6:19:aa:a0:
96:da:e0:90:82:00:76:6a:66:c4:cc:57:8b:fe:19:9a:39:a0:
46:c9:37:89:48:ec:9f:69:14:ba:74:11:6e:92:58:0a:25:74:
64:19:c5:61:99:df:31:e4:c9:50:b3:b1:7c:55:19:34:cc:60:
00:d5:b5:98:40:14:22:5e:a8:9e:ac:0c:53:5d:d8:e5:b8:31:
4c:4f:ce:e5:1c:d6:f1:e0:46:93:b9:0b:ef:09:ee:c0:c6:b1:
71:73:41:fb:13:73:33:ec:63:d9:d2:69:ae:17:47:93:40:e1:
e9:00:6e:19:79:46:df:66:2e:c8:37:32:11:fa:83:91:9c:45:
cb:91:1f:11:bb:2d:58:48:fb:46:b7:d7:ec:fa:8c:a6:ea:c7:
e3:fd:e6:c0:d3:32:6c:2b:68:8f:8e:aa:6f:fa:41:32:4e:99:
ea:e6:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:57 2025 by rpki-client