Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2637a8c-7254-30c1-8d04-40766f5b1cd7.roa
File: d2637a8c-7254-30c1-8d04-40766f5b1cd7.roa (raw, json)
Hash identifier: pstrMlRtzbam9dwBJBwbEkuEDRYA5IoABKBjKCFNBcY=
Subject key identifier: 27:3B:30:50:A0:14:20:10:E4:6C:9E:3D:29:55:CE:4B:1A:87:68:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840278999374EA2622F25C36400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2637a8c-7254-30c1-8d04-40766f5b1cd7.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:89:99:37:4e:a2:62:2f:25:c3:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=815b4937-c46a-428a-be18-9c3a3429a76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:29:85:9c:53:c1:01:fe:d2:39:b5:42:bc:
2c:1b:f8:db:1c:7a:f9:fb:23:cf:b3:c4:a3:ab:37:
52:dc:e0:50:9a:22:07:a4:e2:f7:07:31:6e:00:6f:
52:ad:2f:5f:75:58:cb:c5:47:0a:a6:d6:62:99:a8:
5a:11:22:39:b5:1d:9d:df:db:74:c7:c8:da:7e:09:
77:6b:40:e1:8b:e3:32:f8:d0:21:01:88:73:97:0c:
05:d7:34:2c:14:66:c3:99:65:75:21:7a:04:ec:bc:
e1:6c:07:53:e8:43:95:0e:e1:a8:4a:1b:d1:9b:99:
3f:09:ff:84:9e:8c:7a:49:06:05:0f:c0:ea:07:22:
4c:9b:02:ab:95:6f:b5:e3:64:38:31:af:7b:c7:f6:
68:01:da:0d:8d:69:11:3c:da:7a:68:3e:84:0d:e9:
fd:17:f6:c7:95:fd:4e:4f:43:96:b9:63:43:ae:f4:
90:df:5e:93:e3:3e:a1:55:03:f0:38:56:00:2e:41:
cb:3f:f1:dd:4a:fb:db:fe:55:5d:3a:68:4a:6f:57:
1c:9f:e5:28:a8:3d:35:57:dd:7d:d2:fd:33:98:47:
e8:7b:75:27:de:5f:b2:d8:24:cc:e7:c4:c2:b3:2b:
b3:2b:28:4a:b8:e6:fa:7f:d2:06:05:9e:d7:14:5b:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:30:50:A0:14:20:10:E4:6C:9E:3D:29:55:CE:4B:1A:87:68:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2637a8c-7254-30c1-8d04-40766f5b1cd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d2:e0:c5:84:f9:14:e2:ba:40:c8:a4:a9:08:1d:a8:bc:f9:
34:6a:d5:3e:b4:aa:29:67:b1:57:63:68:63:7a:5a:7d:a4:54:
02:bd:50:26:0d:58:ec:a6:e5:fd:a4:d7:c6:a5:b5:36:ae:bf:
a7:51:a1:49:93:e9:5c:3d:d2:25:36:a8:68:93:18:3a:1e:91:
1d:8f:18:e1:19:9b:35:5f:31:9b:ab:97:b2:3f:9c:46:b7:bd:
27:83:54:47:91:7e:8e:15:cd:82:b1:49:a5:0a:67:fc:da:29:
b6:5a:ed:a6:94:58:81:98:6b:d2:25:23:99:a8:0b:95:a7:f9:
c2:a0:82:4b:00:70:f7:94:78:f3:6b:76:bf:49:72:47:40:e8:
26:db:9c:80:ed:41:38:a9:f2:36:c1:60:6a:92:6c:0e:d4:0a:
a8:fd:6b:ab:72:e5:1f:77:84:d0:46:27:07:6a:ee:2a:b4:c7:
98:f2:90:12:18:d4:38:87:91:63:19:1a:d9:ac:95:51:e6:32:
98:c0:99:15:7c:8c:12:7b:e9:3c:c5:73:42:40:f0:4a:95:0d:
0e:a8:bf:38:97:de:9d:7f:95:f3:fb:d4:26:8f:58:ea:1b:fe:
1f:37:43:c8:d6:7e:13:b8:df:d1:2d:1b:e4:aa:23:82:42:d9:
0d:df:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:00 2025 by rpki-client