Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3428b2a-66a9-3588-8325-c5941399b656.roa
File: b3428b2a-66a9-3588-8325-c5941399b656.roa (raw, json)
Hash identifier: o6utWY2r2z8NhR61Rta0/88a7cFhW3DXDtT7ULMlPnQ=
Subject key identifier: 70:D9:A2:82:F0:9E:CC:8A:88:D5:81:45:BE:63:58:F2:32:F1:CB:0B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CCC7F1E32338E0C0337AA5600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3428b2a-66a9-3588-8325-c5941399b656.roa
Signing time: Wed 02 Feb 2022 05:00:00 +0000
ROA not before: Wed 02 Feb 2022 05:00:00 +0000
ROA not after: Wed 09 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:cc:7f:1e:32:33:8e:0c:03:37:aa:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 05:00:00 2022 GMT
Not After : Mar 9 05:00:00 2022 GMT
Subject: CN=83dca842-8f7c-42e1-9ff1-a93e72201435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:b5:80:63:e7:1e:04:ce:31:d0:9f:d0:3a:
47:63:06:a9:83:2c:13:62:99:d9:d2:6c:a6:1f:07:
ad:1c:45:8d:d2:41:8e:b2:8b:25:57:91:1f:83:41:
79:82:87:d3:01:2e:99:e2:c2:51:67:2b:d3:53:6a:
75:df:e3:2a:b1:6c:51:6c:ae:e9:69:d1:4e:bc:3f:
64:df:22:b0:f3:24:df:3f:f0:bf:10:4e:76:41:60:
9f:82:4e:f4:5c:b8:52:a2:10:84:48:29:ac:28:24:
4e:95:bb:e9:68:4b:a9:c2:75:4d:75:c1:c8:fd:28:
5b:02:13:84:f5:40:2c:7b:2b:87:d1:bd:73:a5:15:
9b:33:8a:14:3e:ed:e8:6f:29:c4:69:f5:88:c2:bd:
4e:30:c4:f7:5d:07:d4:1d:31:5e:21:a2:fe:c2:d3:
ce:b5:d0:3b:5d:70:84:96:6b:a8:d7:09:18:23:b7:
2b:49:1e:a0:10:00:89:b8:65:9e:e0:fa:15:97:52:
9d:86:51:af:d3:b0:05:4b:e2:97:ab:9c:9e:5b:55:
20:0c:71:5e:ff:46:dc:7d:43:dc:b2:c8:a6:da:3e:
e1:80:dc:9e:b5:09:19:3f:08:28:67:79:82:4a:38:
ee:91:47:0d:36:48:e1:b3:ef:64:ee:18:d8:90:4c:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:A2:82:F0:9E:CC:8A:88:D5:81:45:BE:63:58:F2:32:F1:CB:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3428b2a-66a9-3588-8325-c5941399b656.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:53:da:64:bb:34:c1:54:58:d2:fc:a1:c8:c0:6d:6c:22:0d:
1c:cb:4b:7d:22:b8:9a:1b:aa:04:f6:38:e4:ab:27:b5:ed:c1:
5d:47:48:31:d0:0a:ce:c6:5c:b2:9e:49:00:8d:07:a3:60:d1:
e9:4a:77:8d:00:a6:d7:9f:6e:a5:f1:d7:50:91:d4:06:d5:bf:
4c:94:bb:22:26:c9:95:be:3d:45:93:a9:a5:07:4b:58:46:fc:
8d:2f:5f:f5:1c:9c:9d:1c:f4:50:af:7e:b7:a1:9b:fd:67:31:
74:3d:3e:57:44:43:21:4e:81:16:24:99:b2:44:82:60:9f:c6:
3e:53:b9:15:68:e9:25:d4:b4:b3:9f:20:e6:87:a7:77:f9:02:
d8:63:26:3d:e3:d0:27:4c:5d:53:71:6c:2f:74:80:3d:d9:38:
b3:ad:b4:ca:36:52:67:ef:1a:16:20:04:e0:5f:f2:2d:c4:ed:
45:87:a0:78:05:60:39:29:cf:30:de:fa:2c:38:dc:bc:a8:c7:
bd:2e:ba:55:0e:2f:47:c0:f9:3a:1f:91:60:fd:4c:f2:4e:cb:
e4:8f:bd:62:e4:02:68:c7:8a:07:bb:b6:0b:20:85:2d:cf:26:
9a:ba:48:77:23:dd:65:f8:ad:fe:85:cc:94:c5:11:9a:88:09:
b0:e3:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:15 2025 by rpki-client