Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4d6ad64-c7a5-328f-95a1-ad5ab88b682d.roa
File: c4d6ad64-c7a5-328f-95a1-ad5ab88b682d.roa (raw, json)
Hash identifier: GFnIRJMjOhrhHMh48TpyPfKoZnSuEfgMsNJXqX3iRHE=
Subject key identifier: 34:18:04:66:8B:C4:2C:6E:E5:3B:3A:4C:AB:9F:17:18:92:D5:ED:71
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053C4E722AB1D146C8C3EAA40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4d6ad64-c7a5-328f-95a1-ad5ab88b682d.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:c4:e7:22:ab:1d:14:6c:8c:3e:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=fa800915-e378-4d92-be6e-a8a073a5e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:c5:ee:cc:b9:ce:2c:70:13:7a:a0:6e:83:
b8:37:fd:d3:c7:3d:64:37:6e:9c:81:f4:b7:2e:5a:
57:f7:b3:e9:48:aa:15:cd:8d:d8:e3:f3:3f:c6:91:
64:db:ad:09:30:50:b4:72:bc:17:a6:fc:11:27:23:
0b:ca:c7:a5:4a:02:a3:da:93:9b:b4:70:ca:7f:ec:
36:47:6c:d4:62:1f:41:6d:6e:6a:81:79:db:c7:71:
f4:db:0b:51:5f:7c:98:c8:20:7e:a1:ae:8a:07:10:
81:83:38:5e:c9:d7:92:07:98:84:62:2b:ae:40:2e:
aa:42:f1:ed:72:04:41:75:5a:bb:02:5b:bf:12:23:
b5:0d:02:a4:74:23:08:b6:f6:ad:d4:57:5b:4e:e9:
5d:99:1a:ca:a5:73:02:6e:d7:e2:08:d0:c7:50:66:
39:bb:d1:61:48:5e:2a:e9:f6:ad:69:51:57:fd:dd:
cf:a5:b4:2f:04:a3:26:c5:7d:50:72:ac:f4:50:c9:
12:72:cd:94:82:f2:53:fc:8d:17:db:53:81:68:b6:
1e:5f:92:25:51:08:5c:80:b3:ff:75:27:55:96:49:
b5:40:7e:f4:53:e2:c5:ff:b2:bd:5b:9f:4a:8b:f4:
0b:36:32:f7:bb:de:53:e2:db:b0:65:c4:fb:94:af:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:04:66:8B:C4:2C:6E:E5:3B:3A:4C:AB:9F:17:18:92:D5:ED:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4d6ad64-c7a5-328f-95a1-ad5ab88b682d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b4:de:12:bc:70:50:eb:ea:9d:a7:42:68:b7:6f:be:70:bf:
c5:b3:55:6f:3c:15:c2:40:01:7c:66:89:67:2e:6b:73:4b:f5:
50:58:56:7f:13:c6:de:03:c9:49:25:96:4e:ea:60:6a:b2:93:
d1:87:db:54:c5:74:1e:9e:2a:d1:cf:34:cc:d9:a3:d4:fa:77:
74:b0:cb:a2:b6:03:2b:64:06:bc:79:ef:d9:3b:e7:10:33:12:
f0:08:1c:3b:e3:6f:e4:fe:33:11:74:0f:6e:36:48:47:02:a8:
b4:5e:3f:16:3e:04:af:3e:1c:d4:98:b3:f9:de:34:cf:b4:33:
47:41:9e:83:29:56:ef:85:ec:2d:4b:c6:a7:d0:7b:a5:5c:82:
b3:25:99:ee:9e:1a:fe:8c:26:0b:26:9a:02:3c:1a:e7:8b:85:
44:de:c7:35:0b:29:c8:ad:b0:fc:56:b3:54:90:81:fe:33:b0:
f4:56:1d:18:a2:57:eb:9d:7a:6c:56:d4:41:dc:64:16:95:e3:
dc:1e:63:a8:68:ea:e4:70:44:33:9e:c6:56:c3:db:90:52:dc:
0b:ce:d1:a5:3a:af:38:fa:f1:9d:1f:71:de:ed:5e:37:2b:5c:
d3:f0:44:1b:d3:0e:66:7d:03:d2:98:c3:ed:1f:16:58:b9:45:
d8:23:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:07 2025 by rpki-client