Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba817dc8-1af1-3381-b6c0-97e066f17222.roa
File: ba817dc8-1af1-3381-b6c0-97e066f17222.roa (raw, json)
Hash identifier: fEN9Lz3ljPdnAxT56xMV8iQyqXB6ZB33e4kAR4Tm2/4=
Subject key identifier: E2:D0:5C:96:46:82:AC:B7:E4:8E:C1:E2:2D:3F:38:12:B2:4F:3F:3E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FFDA1C2215A3029FB452FC8D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba817dc8-1af1-3381-b6c0-97e066f17222.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:a1:c2:21:5a:30:29:fb:45:2f:c8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=c3bf3141-0137-4b48-88bc-0b38f5941884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:c1:88:92:07:d1:51:11:8f:77:8b:67:11:
17:57:4f:2a:aa:d2:49:47:4e:ae:62:b4:2a:cb:3b:
3a:0d:0f:71:1c:26:5a:e7:be:fe:53:23:fa:d3:d9:
c1:f7:d2:a4:cc:1d:cf:c8:b5:34:62:74:da:7c:8b:
78:52:83:d9:89:e2:cc:6b:1b:49:7e:44:3c:94:9f:
a0:f8:3d:2f:57:d9:c2:39:ca:68:f0:ef:e2:0c:fe:
d7:87:2e:7c:34:24:d8:06:23:e4:5c:73:c6:9e:0a:
bf:1a:79:ae:4b:c7:9d:23:e1:ae:1c:21:0d:f2:54:
92:f4:f8:42:54:ea:0b:28:3e:8a:ea:70:c7:f8:87:
37:1f:5e:20:8d:e8:84:5a:55:4d:01:02:48:de:24:
c8:db:a5:d8:d3:5d:c5:cb:41:c3:2b:ba:aa:fb:9e:
46:21:38:23:d7:d5:97:77:bf:3e:e6:5b:e7:8f:7e:
a4:d8:c4:d1:73:b0:cc:29:05:22:e4:c9:88:5b:25:
09:d3:5c:16:bc:8c:5b:ec:63:bf:85:55:c4:6b:d6:
86:5e:6d:af:9b:51:75:bd:4d:d2:cb:1e:fa:63:48:
a3:35:01:fa:72:4d:1f:93:66:6e:a4:73:5c:b6:9b:
cc:eb:a0:35:45:05:e2:01:ea:17:cc:73:03:8b:44:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D0:5C:96:46:82:AC:B7:E4:8E:C1:E2:2D:3F:38:12:B2:4F:3F:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba817dc8-1af1-3381-b6c0-97e066f17222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:d7:f9:65:77:6c:f3:89:50:3d:84:e6:cc:c6:8f:63:24:7f:
0a:13:b0:cc:81:49:0e:88:00:17:14:65:c8:71:81:d3:6d:93:
05:ca:b1:8e:05:a0:59:b1:8b:3a:9c:e6:6d:b9:e3:da:1d:03:
da:dd:70:a7:28:a0:53:e7:34:d5:28:cd:3d:2a:fb:ab:b4:f6:
af:80:03:ac:c2:02:1d:50:a0:e1:b3:83:cc:37:f0:9d:f3:a8:
cd:91:92:b3:ae:12:13:48:ac:3f:48:99:b0:ab:0e:89:d6:83:
81:86:77:c0:32:fd:c1:2a:a0:03:8d:c1:54:1e:be:3e:1c:ce:
65:a6:d7:87:53:d3:18:ed:c1:30:26:da:ea:9d:18:95:d9:48:
27:aa:1b:e6:81:5f:bc:fb:68:52:8a:da:d9:6f:5f:e2:c7:29:
72:9c:03:55:49:9a:82:ba:75:4a:34:90:ef:6d:ce:59:8d:a1:
db:83:5a:ba:a0:98:af:0d:b3:bc:9a:6e:d4:d2:c0:1c:a9:6e:
0f:63:70:77:1d:23:a5:ef:ca:61:da:3a:c0:dc:0a:54:aa:63:
97:3c:f9:f7:08:fe:8b:4e:d3:1b:21:c6:5a:99:09:21:c8:51:
9a:ae:95:40:0b:37:d4:b4:c8:98:80:39:18:62:f6:97:cb:3b:
88:99:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:52 2025 by rpki-client