Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0409a72-c7b3-3bcc-900e-d2a8682f80d2.roa
File: d0409a72-c7b3-3bcc-900e-d2a8682f80d2.roa (raw, json)
Hash identifier: mmFfdd/LaLUBQVFckdi89aLbeVU+dyMkjgFEbfP3Fg0=
Subject key identifier: 81:CC:2C:03:2E:BF:25:CF:2D:26:A5:0A:C2:62:D3:50:E5:4B:13:F9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F880F0210BD927324A7568B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0409a72-c7b3-3bcc-900e-d2a8682f80d2.roa
Signing time: Mon 10 Oct 2022 15:51:07 +0000
ROA not before: Mon 10 Oct 2022 15:51:07 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:88:0f:02:10:bd:92:73:24:a7:56:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 10 15:51:07 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=f570ee0f-3970-43e5-88d2-c988f8ddf237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b1:f6:c8:98:5e:7a:5b:0d:7f:32:ef:ab:d9:
fd:b9:72:7a:0c:a5:82:d4:19:8e:6a:a1:47:ca:18:
fa:ef:6c:03:40:0e:d3:12:a1:57:78:a9:81:00:39:
07:32:ca:28:38:9e:18:be:a4:bb:3d:2c:3d:44:a0:
77:26:c8:af:fd:f4:9e:68:fb:f5:43:75:d7:76:20:
56:ec:ad:4d:30:44:4f:8f:92:73:3f:76:92:15:e3:
f2:a7:7d:c5:4e:94:42:d2:21:55:1c:94:d9:d4:a4:
f5:ae:e8:fc:e8:19:3f:1c:32:94:96:cd:39:35:c0:
e3:a3:f3:e2:d2:25:54:c7:b1:34:4a:51:13:1e:6f:
81:a1:e0:52:01:12:e4:e8:04:e0:c2:e7:1e:47:76:
07:7d:57:f1:d4:03:33:17:6c:59:e5:52:1f:9a:ec:
24:1e:91:84:8d:b0:9e:a6:a0:77:35:2e:77:0a:80:
22:45:8d:82:0a:cb:42:67:80:f7:8a:3a:6c:3e:65:
8c:71:23:d7:19:81:fc:89:df:11:9b:88:03:df:e4:
c5:34:b7:cc:32:7c:f7:f5:e5:0e:d8:dd:7e:f2:63:
9d:a2:19:f6:6d:a5:9c:d7:58:d6:6a:6b:7a:b7:30:
99:14:af:60:44:3b:0d:5e:83:dd:09:df:7d:ff:b4:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CC:2C:03:2E:BF:25:CF:2D:26:A5:0A:C2:62:D3:50:E5:4B:13:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0409a72-c7b3-3bcc-900e-d2a8682f80d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:84:98:30:05:36:6b:91:a5:8c:1a:be:05:8a:b7:54:c6:52:
6b:ae:36:2f:a4:ac:44:8c:27:cc:aa:93:6e:41:e5:89:8b:e3:
c9:e6:e6:f2:e1:36:e4:87:5a:c5:52:f0:61:eb:28:2f:3e:2c:
b3:f8:5d:22:37:1d:b6:f9:82:a2:c7:11:52:54:9a:69:0e:1c:
d1:ea:ea:3a:38:ea:e0:54:56:17:a4:19:92:d9:1f:13:f7:8d:
0a:81:15:6c:41:b5:60:f8:ed:27:b3:06:97:e3:8c:79:2d:e0:
8b:40:83:69:06:33:26:0b:af:b4:ad:30:1b:44:db:81:b6:79:
18:f9:61:ed:6d:44:2d:c5:21:00:1c:92:e6:32:a6:ba:b6:5b:
5e:c1:98:e7:cd:d0:e7:b8:4b:c7:7e:39:ee:13:ed:7a:dc:44:
2f:47:5e:fc:19:79:00:aa:04:fe:a4:57:a6:fc:20:4b:63:d4:
7a:b2:ca:a2:fd:12:72:2a:23:e5:6f:d3:ef:59:e8:ac:1a:8b:
fe:fa:52:80:a5:58:9b:4e:50:93:7c:64:3d:8d:34:03:0d:a6:
fb:a3:f9:24:b9:de:cf:91:8b:75:68:77:bf:52:db:6f:56:85:
9d:c9:6e:05:80:22:77:be:15:d5:79:a0:e1:bb:5e:ff:55:f1:
79:40:75:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:52 2025 by rpki-client