Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b234dfd4-e8c9-39d4-9eef-85a3159c3a13.roa
File: b234dfd4-e8c9-39d4-9eef-85a3159c3a13.roa (raw, json)
Hash identifier: 5xSlTIu56V/MBO/03wpF2d8IR9jbG7wbHZs3or5zDCA=
Subject key identifier: BE:72:02:28:79:2C:82:C1:6B:B8:D6:6F:7C:D4:83:93:8E:2F:30:6E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858407ACBAC6FF976C7BF0D313700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b234dfd4-e8c9-39d4-9eef-85a3159c3a13.roa
Signing time: Thu 05 Jan 2023 12:00:00 +0000
ROA not before: Thu 05 Jan 2023 12:00:00 +0000
ROA not after: Fri 10 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7a:cb:ac:6f:f9:76:c7:bf:0d:31:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 5 12:00:00 2023 GMT
Not After : Feb 10 05:00:00 2023 GMT
Subject: CN=2fef7b09-8254-47f8-9fbb-76c8d2e65a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7c:b2:a0:b1:5a:7a:70:03:81:7a:a9:1b:44:
ba:1f:50:59:b3:ca:1a:6f:d7:a4:ab:fb:40:54:fa:
70:81:91:4a:d8:67:41:a5:5f:c8:ac:ae:88:fd:e5:
11:a1:94:47:27:50:2b:a0:20:75:60:08:5d:1e:08:
bb:12:d5:a1:06:e1:12:0e:6a:11:65:fa:ca:9f:0a:
ce:09:e9:78:dc:f9:96:29:6e:0a:9c:98:c1:16:0e:
97:29:05:b5:e6:64:d1:62:65:f7:72:02:fb:98:b5:
46:ac:82:81:64:b4:8a:bf:32:99:ba:d7:bf:62:6c:
aa:67:96:10:ed:a7:b5:b2:c2:8d:92:9d:82:70:e0:
f5:f5:8b:92:15:e2:02:5c:7b:93:21:ef:2f:01:2e:
d3:f9:66:87:ec:27:d3:43:2d:f9:df:a3:08:c4:17:
76:4c:20:ca:1f:86:44:14:cb:72:2d:8a:84:25:59:
a0:a3:bb:28:15:d6:a0:78:82:6c:b7:82:09:72:1c:
92:39:d0:d6:25:cc:74:3a:14:41:04:7f:1a:ce:e8:
4c:21:d5:91:ba:a6:fb:5e:90:74:b9:b6:be:a3:3f:
43:74:02:43:21:ef:5d:bb:92:1b:8e:c1:d9:ed:f5:
ea:97:30:28:54:7d:a0:12:4d:cc:a4:d0:50:0a:9c:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:02:28:79:2C:82:C1:6B:B8:D6:6F:7C:D4:83:93:8E:2F:30:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b234dfd4-e8c9-39d4-9eef-85a3159c3a13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:38:c8:3a:c4:f5:a7:52:de:84:fe:d6:9c:42:6f:41:b4:b7:
8d:70:b2:b3:bf:86:2f:2c:8e:a9:d3:fb:b7:34:7a:60:3d:cb:
1c:97:0b:a5:ea:54:c9:92:dd:6e:9b:e9:33:c6:45:12:cd:89:
6d:aa:2f:37:47:46:46:e8:1a:13:70:ca:62:08:63:d9:20:70:
b1:72:4f:4c:6c:19:f3:63:76:23:6c:b2:7c:f4:85:b8:c2:5f:
a0:c2:2e:81:d7:d3:7e:bc:2a:7e:7e:71:a9:b3:f0:88:d9:e1:
fb:48:10:09:b0:a4:4b:cc:7c:1f:cb:07:90:15:2e:86:7d:66:
f0:f3:06:63:33:ac:93:4b:43:c6:83:b5:57:c1:c1:b4:85:0e:
2c:44:00:eb:3b:58:dd:d4:04:de:c5:85:d3:bf:52:5c:96:3d:
bf:1a:5c:b7:b3:e4:e5:fa:5d:48:08:e7:04:b8:20:c8:61:eb:
7a:24:88:b4:9b:11:b3:2e:d4:39:81:82:6e:f7:4b:7d:89:18:
94:48:48:00:f0:0c:5b:88:4a:97:bb:af:a6:cd:ec:d2:e8:e4:
21:5e:49:f8:7d:90:05:89:47:e2:1f:e2:96:c1:51:b1:9d:f8:
95:dd:fb:80:d3:d6:cf:68:0a:6b:25:1b:eb:17:e0:8e:66:7c:
aa:5b:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:42 2025 by rpki-client