Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd626297-95fd-3ab5-b3bf-5d9c2b7a610a.roa
File: bd626297-95fd-3ab5-b3bf-5d9c2b7a610a.roa (raw, json)
Hash identifier: CKyCRZNCyH0jILg/yp0nEHDhA5rAXpz09IpIwcgxcBI=
Subject key identifier: 1E:79:71:1B:54:1C:E0:A5:C2:56:25:20:A3:D6:6E:32:E5:F7:8B:FC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404C2DCF6F53845B04AE6BACD0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd626297-95fd-3ab5-b3bf-5d9c2b7a610a.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4c:2d:cf:6f:53:84:5b:04:ae:6b:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=47d530fe-9918-46e7-8fda-d665800a28f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:a2:05:51:1e:c7:4a:b9:c5:0b:b9:e4:ee:
6c:ee:49:9f:67:ba:f5:b9:e5:6e:c9:fd:19:48:9f:
ff:8c:6d:31:a5:77:0c:2a:0c:4b:48:a7:9b:9f:fb:
bf:65:b9:1e:c1:0d:49:4a:61:5e:0c:0f:3d:4f:41:
bd:fe:bd:e4:c6:c0:c4:d2:52:19:a5:42:3e:54:35:
2e:7d:e6:b4:08:19:df:3c:b2:ca:f0:c1:0a:03:22:
98:6e:c9:d5:3a:a8:8a:c4:7d:ca:e9:59:69:71:3a:
e7:01:ec:66:85:28:65:0c:71:6c:b4:5c:39:3b:a3:
bb:ce:44:06:87:d2:fa:25:87:a3:68:04:b5:56:5c:
3c:c8:38:93:86:68:7d:14:96:f1:15:4e:b2:43:f4:
fb:c1:1b:b2:ff:21:e7:1a:e9:cd:3d:f4:b5:40:97:
ed:b0:b2:db:84:ae:95:68:fa:9f:be:0f:ac:c4:80:
9d:4d:52:8d:7f:80:7e:c0:d2:c3:87:11:c8:de:20:
83:b7:85:b8:0b:a2:49:39:42:0a:55:ce:e2:7f:49:
2c:72:80:c8:80:51:b3:05:72:05:8b:15:b8:ed:1d:
ed:a0:72:6d:c0:2a:f3:e0:65:70:07:22:da:ed:2d:
f8:13:a4:ac:45:99:be:86:66:be:f4:8a:ec:db:a3:
81:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:79:71:1B:54:1C:E0:A5:C2:56:25:20:A3:D6:6E:32:E5:F7:8B:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd626297-95fd-3ab5-b3bf-5d9c2b7a610a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:18:ff:80:12:ac:0f:16:59:93:f7:c5:85:71:7d:cd:b9:c9:
75:ca:13:aa:46:c2:cb:12:43:94:42:1f:28:bb:a1:7b:fc:f0:
a2:ee:38:29:ab:00:e9:f0:e8:ac:20:fa:c8:54:52:47:4a:b9:
b7:84:b0:95:3f:fe:6d:3c:dd:a5:4b:ac:49:9e:88:4c:04:7d:
34:da:50:97:b3:66:bc:24:49:05:10:2a:90:03:a3:96:56:31:
f7:9f:79:c5:6a:e1:06:6d:ae:e0:d7:48:b1:17:f5:ff:fe:a5:
27:1f:a4:b9:82:18:0b:1a:28:a3:d3:4f:79:82:53:e8:86:38:
b9:73:54:2d:54:ac:8a:fd:e8:ec:40:eb:e3:dc:f0:1f:2f:1d:
e7:6c:7e:94:a4:b3:16:3f:b6:5e:7e:b0:ef:40:0c:91:45:59:
a6:5e:8d:0a:92:61:e7:19:c8:ac:b4:b3:23:90:bd:26:2d:2d:
f8:12:21:c2:ef:e7:7f:95:b1:98:c8:44:6a:b0:68:17:7a:41:
c6:97:2a:76:96:1e:00:a7:0d:ba:68:09:79:2c:85:02:18:7b:
11:b9:5d:a4:d7:82:02:92:6a:a9:9a:0a:62:18:16:f3:8a:a9:
27:1a:fe:4e:6e:ca:91:6c:55:fd:7a:18:8f:5e:15:34:3f:f1:
1c:97:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:35 2025 by rpki-client