Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7cbc7c-1716-39fb-8537-673429c01197.roa
File: bf7cbc7c-1716-39fb-8537-673429c01197.roa (raw, json)
Hash identifier: G5uK7wamYADDxHMe+0yrWV+Sd409dg/9vc3bafvwmj8=
Subject key identifier: 8C:C5:0C:9A:4A:D2:33:AE:AE:4E:8D:F6:D3:5D:37:9F:8A:AA:53:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D63F2BF9E6C8023CA76B58A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7cbc7c-1716-39fb-8537-673429c01197.roa
Signing time: Mon 28 Mar 2022 04:00:00 +0000
ROA not before: Mon 28 Mar 2022 04:00:00 +0000
ROA not after: Mon 02 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:63:f2:bf:9e:6c:80:23:ca:76:b5:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 28 04:00:00 2022 GMT
Not After : May 2 04:00:00 2022 GMT
Subject: CN=7189e524-042a-428f-8f19-a1adaac59ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:0c:38:99:c5:d6:3d:7b:6c:47:fd:2c:df:
c8:5a:4f:c9:a6:f2:e9:1e:83:01:f4:3b:46:86:63:
8a:64:02:cc:ae:be:fc:d6:29:a1:20:cc:ce:ea:9d:
36:25:b4:d0:86:44:2f:64:35:32:4a:89:17:08:08:
1d:cb:d8:3e:f8:3e:99:27:98:2b:0b:37:57:ca:b6:
f0:96:62:31:4d:5e:f7:6d:30:ed:5c:7b:b9:47:6d:
09:4a:44:dc:60:34:fc:85:91:ab:77:ff:b7:4c:b0:
49:d5:f0:29:58:b9:d2:85:5b:af:e3:55:69:97:28:
b1:36:e2:ad:a2:d0:ce:0a:82:32:0b:c7:b9:51:d8:
4f:e5:b4:9e:46:10:56:f5:81:4b:13:40:91:79:96:
e1:d7:63:c4:6e:c3:0f:41:6b:6c:6c:b1:99:09:7d:
e1:71:b4:90:4b:fb:c3:21:7d:6f:91:f8:3a:02:49:
ac:8d:75:fe:ad:a8:42:c6:29:7a:90:22:a9:90:e4:
97:56:5e:5f:60:5d:74:2c:03:04:f7:7e:89:0b:1c:
00:6f:e7:fc:aa:9d:c5:37:f4:f1:21:87:9f:8c:5e:
ba:30:10:ca:70:89:33:ee:07:36:e4:c5:db:32:a6:
5b:b7:93:48:b0:b3:cc:7f:2b:e0:b5:10:a4:53:67:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C5:0C:9A:4A:D2:33:AE:AE:4E:8D:F6:D3:5D:37:9F:8A:AA:53:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf7cbc7c-1716-39fb-8537-673429c01197.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:db:a6:e0:40:17:ff:77:54:96:34:8e:ec:34:c7:73:8f:8b:
ec:c7:5e:1a:4e:8d:7e:cf:5d:9c:8a:22:23:2b:ac:04:e3:c6:
f1:33:84:78:53:43:0a:5b:92:0e:91:ef:e1:ac:ba:1a:2b:9e:
0f:e5:da:c2:1a:3a:00:54:56:e9:4d:e3:49:bb:17:0f:59:d1:
b8:97:b1:ff:01:4c:e2:cb:73:db:e2:3d:26:2e:49:d8:d9:a1:
e2:1f:f0:70:75:f4:d0:d4:fb:01:ed:70:eb:93:be:f7:b2:67:
5a:2c:16:f4:cb:08:9e:d9:0f:a0:d1:fb:d5:a1:3f:18:a2:bb:
c1:7b:96:af:0e:f4:66:e5:5a:3b:3d:e2:01:68:05:37:76:22:
f8:df:4f:f2:a9:92:96:9f:92:61:11:9b:b5:34:bf:28:5c:c8:
14:47:47:20:ee:e5:fb:8b:e4:0c:58:8a:eb:cb:1d:f5:71:e6:
3f:95:26:71:c3:94:70:3c:8e:22:e3:20:4e:58:18:85:cc:2c:
6c:dc:c7:ec:ae:3d:a5:37:15:99:bf:48:72:76:83:0f:e0:1c:
a9:4f:b7:91:2d:ec:8b:74:98:c0:d3:6d:99:29:c0:e3:de:89:
0f:f2:05:54:66:79:9e:0d:5e:b1:33:6d:16:6e:7b:7d:84:cc:
b0:89:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:35 2025 by rpki-client