Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0465ed4-e007-3fa5-932a-c10df6823759.roa
File: d0465ed4-e007-3fa5-932a-c10df6823759.roa (raw, json)
Hash identifier: /0Io3GZk/5GDYGrxN1kWJbPV5hKVTo0fc0WphP85lcs=
Subject key identifier: FA:BA:D8:7F:A8:D2:00:CA:6A:E7:58:1F:05:C5:D8:0C:F7:6D:B1:4D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AA75435064AC2C27AED38040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0465ed4-e007-3fa5-932a-c10df6823759.roa
Signing time: Sun 22 Jan 2023 12:00:00 +0000
ROA not before: Sun 22 Jan 2023 12:00:00 +0000
ROA not after: Mon 27 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:aa:75:43:50:64:ac:2c:27:ae:d3:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 22 12:00:00 2023 GMT
Not After : Feb 27 05:00:00 2023 GMT
Subject: CN=05ef63a2-db97-41b9-bf21-76328062bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:39:c5:3f:db:7e:63:64:e7:1b:c1:cc:97:
a0:ba:6c:eb:3b:f3:dc:08:ee:53:d4:f7:00:d8:37:
15:b4:53:c0:a6:51:d5:9c:76:b3:ed:2d:79:9b:20:
eb:37:71:0d:fd:54:74:3e:0d:91:46:df:35:2b:41:
c4:fb:6c:f5:c1:93:a2:80:62:27:9a:46:48:52:08:
b9:f2:43:ec:81:b3:bb:2c:3e:da:35:a5:1e:83:dc:
e0:7f:3e:69:0b:be:08:dc:d2:26:06:49:9d:62:77:
50:35:fc:ff:3f:7e:ea:36:fa:e1:9e:b0:74:d7:28:
15:fa:ce:26:bc:ee:b7:43:a6:13:fc:ae:23:e9:fb:
47:a9:31:01:23:6f:3f:6c:87:a0:d2:d9:41:d3:5f:
9c:4e:96:83:f9:38:b1:6b:32:3d:07:58:a8:bd:1c:
cd:b7:d9:c6:54:a6:fa:ea:65:8c:fa:05:cb:bf:74:
3e:12:b2:06:7f:ec:f7:0e:0b:96:fe:be:9a:bc:43:
aa:be:02:0c:ef:33:a4:49:4c:31:fb:db:e4:e1:f9:
5a:41:c8:8d:a0:08:73:90:cc:9f:cb:b3:e6:f4:3e:
3e:94:04:e0:1b:c3:3f:fa:0a:0c:8e:5c:2b:13:a3:
6c:18:42:0f:33:a3:79:c4:de:e0:54:61:19:d7:88:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:D8:7F:A8:D2:00:CA:6A:E7:58:1F:05:C5:D8:0C:F7:6D:B1:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d0465ed4-e007-3fa5-932a-c10df6823759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:d0:ec:77:81:ff:d8:27:db:09:fa:cc:cd:45:0d:14:87:99:
31:16:0e:46:50:b0:d9:ea:23:9f:54:e2:b9:bd:1e:8c:c0:2f:
3e:d4:52:a8:de:d4:e5:25:f8:94:71:a9:9a:b3:3f:22:73:2f:
bc:af:41:bb:90:01:75:29:c4:4a:e1:50:e9:d7:fd:77:52:55:
2a:4f:99:dc:cc:03:13:2a:da:84:0b:3d:bd:a0:90:d7:fe:e4:
0b:bc:e0:e7:ea:0c:2d:9a:69:03:49:0f:a3:a9:d9:1a:a9:dd:
b8:ce:2b:c1:19:f8:0e:04:77:c1:b2:dc:dc:a0:76:06:b1:ab:
3f:d5:ec:1f:08:21:17:da:56:29:a5:9d:5a:d4:30:27:7a:6b:
72:b8:81:7f:77:6f:dc:ba:6e:35:ce:08:31:5f:2b:e5:1c:d0:
63:e8:60:95:e4:1f:44:31:fd:46:dc:1d:c6:d2:3d:17:ec:3d:
06:72:87:82:28:8d:23:09:ac:0a:1f:a5:9a:68:50:8b:7f:9c:
7d:64:e6:37:eb:48:aa:79:00:23:80:13:41:6b:8f:6e:83:c8:
70:37:33:1a:93:68:0b:0b:d6:d1:94:9c:62:fd:f7:a6:33:5d:
91:b0:92:b3:14:7b:6f:43:c9:ce:ef:0f:3a:83:2e:64:3b:22:
86:a8:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:13 2025 by rpki-client