Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d39ca1de-dc76-365c-a7a9-ff3bf2a552c0.roa
File: d39ca1de-dc76-365c-a7a9-ff3bf2a552c0.roa (raw, json)
Hash identifier: OGZGPmCUV0sIV9kvpMdVy4+/tJ6A2xpY7U+mW5XtQ2I=
Subject key identifier: 7D:56:96:70:95:21:D9:10:AC:ED:DA:82:08:60:18:E0:F6:A3:71:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EDE497D4E0AB5EA55C824A400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d39ca1de-dc76-365c-a7a9-ff3bf2a552c0.roa
Signing time: Wed 10 Aug 2022 12:00:00 +0000
ROA not before: Wed 10 Aug 2022 12:00:00 +0000
ROA not after: Thu 15 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.165.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:de:49:7d:4e:0a:b5:ea:55:c8:24:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 10 12:00:00 2022 GMT
Not After : Sep 15 04:00:00 2022 GMT
Subject: CN=bf728b5a-9661-40ee-9c29-37436beabbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:d2:69:34:0f:24:a2:02:67:cf:2e:59:7e:
28:d2:b6:fe:08:9f:24:f5:01:f7:38:b0:0a:15:5b:
44:c7:77:dd:9e:ef:e4:bf:95:ee:cb:61:88:de:2c:
c5:94:be:7f:3e:65:97:1e:60:53:6e:21:c6:6d:f4:
f6:64:40:f2:9b:3c:38:5e:af:31:2e:1a:ff:27:94:
29:96:78:f7:ad:7f:b2:ea:9f:e6:f8:e5:00:3f:87:
ad:e3:0f:d9:4b:66:a3:2e:77:dd:95:8f:de:a4:df:
b4:ac:d5:ad:61:8a:f1:65:71:d1:cb:fe:d0:9b:63:
cb:d3:ff:35:79:8b:f8:e9:18:b6:44:0e:61:1e:dd:
9d:63:00:b7:4e:40:00:29:d2:24:86:a4:b2:a7:5c:
e7:9c:b6:68:37:4c:f1:84:af:1a:26:d7:46:ad:2d:
18:ec:3c:7b:f0:00:bd:6b:f0:d7:5f:84:e7:69:bc:
3e:81:93:f9:1d:9b:eb:08:52:64:fd:c3:b5:07:cc:
06:3d:27:43:f2:76:93:d8:aa:a8:89:2b:3d:04:66:
ab:f5:3d:a2:ad:41:14:13:13:01:20:24:6a:00:6c:
49:b9:00:a6:64:da:dc:6c:c5:4c:25:70:bf:c4:21:
3f:4a:dc:a3:2a:54:26:7c:8b:6a:85:73:83:cc:63:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:96:70:95:21:D9:10:AC:ED:DA:82:08:60:18:E0:F6:A3:71:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d39ca1de-dc76-365c-a7a9-ff3bf2a552c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.165.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:58:12:0e:30:a1:5d:7e:9e:bb:b8:b0:ba:ae:70:ee:38:c5:
2d:74:5b:6b:ba:e5:8b:c0:72:40:77:45:24:96:81:e0:d2:35:
9a:b4:b9:d9:13:95:24:42:34:c4:cc:d0:e1:7a:cd:6a:18:a6:
9f:bc:f9:4a:d5:76:1a:5c:20:5c:83:ff:61:1e:41:61:fa:83:
1b:86:f4:ea:98:4d:61:ec:5c:ad:bd:bc:27:df:c8:4f:15:25:
f4:a0:3e:b6:59:fe:11:3e:91:08:f1:a0:e1:b1:86:df:07:61:
bb:e1:8b:ed:67:b4:c6:51:0a:c6:f2:69:ae:ae:3a:74:7a:61:
5a:f6:31:eb:22:1e:ef:05:74:bc:94:80:e4:18:15:75:58:da:
5f:0c:6b:71:6c:15:f0:0f:74:15:4f:25:16:e3:47:cf:a9:23:
be:ba:d5:f0:44:06:07:78:91:df:a7:0c:07:a9:7e:f5:3f:ae:
1f:38:4c:cd:26:90:b6:f4:6a:87:89:df:f4:eb:17:a5:f2:4b:
cd:40:82:4d:25:b7:b9:6c:09:b7:38:29:3a:cf:c8:cb:73:e5:
fa:b8:34:b9:ee:c8:f1:a0:da:e5:5b:ed:69:4c:7e:fd:33:b0:
b9:eb:8a:fa:23:62:8e:3a:b6:d6:e0:b7:5e:4a:8f:22:01:7d:
06:6a:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:31 2025 by rpki-client