Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b119c455-e378-3658-acd7-4f3fc5fc0bc6.roa
File: b119c455-e378-3658-acd7-4f3fc5fc0bc6.roa (raw, json)
Hash identifier: p949KBleiHM9tsq8L4uEJHDaAxpdN61L5SD/G7O4kMg=
Subject key identifier: 95:73:1E:E9:4B:79:03:D3:14:B4:3A:40:47:F3:4B:FB:C1:C4:C2:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D1CDAD0775A38F1D09FC8E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b119c455-e378-3658-acd7-4f3fc5fc0bc6.roa
Signing time: Sun 05 Feb 2023 12:00:00 +0000
ROA not before: Sun 05 Feb 2023 12:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 40.176.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d1:cd:ad:07:75:a3:8f:1d:09:fc:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 5 12:00:00 2023 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=e625de10-875d-4d4e-b34c-a1cb3ea43e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:11:4a:37:26:31:7b:a8:af:44:5f:95:2a:b8:
08:77:60:f1:37:74:3f:a8:fd:78:c8:26:6f:3d:4a:
a5:4c:b6:21:de:58:53:97:4e:9b:36:b3:f2:d6:6a:
b0:98:cc:d1:d3:f3:cb:26:29:9f:0d:b2:d9:5b:48:
5a:06:82:3e:69:ec:4c:70:e5:2f:56:39:59:41:f8:
a7:ec:13:a6:51:6e:50:87:6b:54:6f:49:b7:77:0b:
56:f1:83:60:31:c9:02:1a:50:6c:e5:5e:33:70:c2:
ac:9c:59:14:6e:78:dc:f0:ac:ac:c2:63:78:36:4d:
b0:4d:e1:4e:1e:fa:69:03:26:59:4b:23:d4:1d:49:
65:a6:ef:fc:8e:e1:30:39:44:91:6c:52:21:19:03:
b5:69:c2:57:6d:a5:1f:24:42:00:aa:b7:b2:aa:ed:
94:e9:bf:c6:57:58:0e:92:ba:73:86:96:91:b2:51:
ff:fa:4a:25:b0:ca:73:a8:58:c3:30:10:23:22:8f:
86:3d:a5:a5:33:26:a1:dc:e6:a8:b8:f1:de:53:93:
0b:b6:39:5b:04:8b:71:b7:5e:14:42:0f:3a:a9:80:
a2:f8:ab:35:89:c1:7d:96:59:d9:44:00:e5:ee:f4:
61:25:a4:da:e2:ac:ab:45:10:80:b1:fb:40:21:ef:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:73:1E:E9:4B:79:03:D3:14:B4:3A:40:47:F3:4B:FB:C1:C4:C2:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b119c455-e378-3658-acd7-4f3fc5fc0bc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.176.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:6d:4e:1a:ed:1b:5a:dc:6e:d7:6d:4c:21:75:0b:04:47:24:
f5:75:92:6f:a2:31:c8:1a:84:ea:2d:18:7c:34:5c:0a:92:4f:
1b:9b:98:9c:04:9c:d6:f4:cb:f3:48:92:9f:94:71:2b:41:da:
3f:ed:8d:b6:59:ca:ff:7e:da:00:1b:2b:f8:9f:b6:56:2a:6b:
bf:99:bb:9c:b0:3f:3e:6a:ec:b7:dc:43:e9:f6:0d:4e:91:a9:
e0:e3:fd:7d:03:1e:c7:90:60:1d:98:7b:e3:74:e1:ec:da:f2:
57:82:f5:a1:0c:b1:95:95:8b:78:8b:d1:cf:c8:02:37:c8:6b:
6a:fc:74:31:b0:99:f5:9e:9a:52:91:b4:24:d1:60:04:58:03:
fb:72:0f:e2:af:b7:64:23:f9:89:68:10:1f:2f:41:aa:08:49:
01:6f:0a:81:47:b0:c9:b6:aa:12:b7:44:ef:4b:52:3b:1d:65:
f0:a7:e8:6a:1b:87:c5:d9:de:ea:38:24:5d:7d:97:c2:57:c3:
79:6b:cb:3b:4b:fa:d0:e9:10:67:58:42:d6:b9:e0:47:8b:d5:
0b:97:12:58:8f:a4:e8:71:78:6a:8a:ee:31:35:6a:45:6d:31:
25:65:78:3f:ad:b1:30:6b:f8:1b:a5:5d:40:5e:7d:7b:29:bc:
a0:2c:d5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:40 2025 by rpki-client