Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4bc0bc4-f05b-3b8c-beb5-50ab20fe9e79.roa
File: d4bc0bc4-f05b-3b8c-beb5-50ab20fe9e79.roa (raw, json)
Hash identifier: klDK5SvbljyBSrHK+YdGW5V3A45DYh0b6WNgE/vblDU=
Subject key identifier: EC:70:59:19:64:55:E8:9E:FA:8D:4A:82:84:A2:6A:E5:4F:E2:B7:B6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B98C72F29618919CA607100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4bc0bc4-f05b-3b8c-beb5-50ab20fe9e79.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:98:c7:2f:29:61:89:19:ca:60:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=58a1ed55-bc09-4b3c-b594-436006a368fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:1f:ff:d0:21:80:04:5d:3b:ac:06:23:1d:
a2:c0:20:4d:01:11:af:86:4b:68:b4:8d:86:03:79:
76:35:26:fb:19:d6:42:d6:10:25:3e:e8:b9:d7:80:
5d:30:e2:00:11:ee:64:7a:6a:72:2b:24:01:bc:cb:
bf:78:95:8d:ea:8b:0c:2a:a4:6f:6d:50:2b:e3:cf:
50:e2:0e:13:f0:7f:b0:0b:ea:23:26:a4:d5:18:4e:
22:aa:1b:2c:3f:54:8a:26:4a:03:67:08:a3:77:4b:
dd:68:2a:d5:d2:7f:1a:42:59:da:7f:81:2c:60:f8:
c4:16:40:60:05:76:80:fe:85:df:48:d8:43:14:54:
ba:6d:10:6a:74:6c:96:1f:78:9d:a5:a9:f9:de:61:
62:08:78:5d:7e:63:65:4c:2a:85:e9:d5:04:73:11:
7d:18:8f:c4:86:22:25:6e:70:b9:8d:c8:71:76:2f:
bf:da:c7:36:13:7c:4e:0f:3f:0a:8b:9c:ac:94:10:
db:6c:2e:b8:a1:07:4d:f7:22:ad:35:94:2d:d4:37:
f5:b6:5b:10:8d:0a:a5:7b:da:36:ba:a2:20:6a:a7:
9b:e5:b5:bd:e5:e4:fe:fc:36:07:fa:eb:f3:4e:01:
f0:4f:9c:b1:2d:a0:52:49:74:63:88:f1:7c:12:21:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:59:19:64:55:E8:9E:FA:8D:4A:82:84:A2:6A:E5:4F:E2:B7:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4bc0bc4-f05b-3b8c-beb5-50ab20fe9e79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:03:3b:f0:7b:10:28:1a:95:2f:ce:5e:2a:de:d7:cf:a5:99:
df:80:4d:7e:24:20:33:94:fa:ae:e7:4d:e0:88:c7:fb:c7:9a:
6e:00:e5:ae:2b:5c:eb:f4:05:ad:43:bc:a9:e3:fd:5a:df:a6:
d0:fc:53:9e:b6:84:8e:cc:1f:c8:8c:85:6b:d0:a0:24:0d:cd:
e8:c0:fc:11:a4:25:0b:d9:26:b3:6b:e8:8e:c1:a5:80:c5:d0:
33:f9:09:a5:ea:6b:92:72:35:74:12:74:e8:a8:cb:fe:f9:e6:
fb:a9:0f:f5:15:10:60:72:a3:2f:ed:f6:ca:09:20:8f:74:23:
87:48:9d:4f:2c:dc:89:fe:4b:5e:a7:74:26:70:c0:9f:77:5e:
e1:ea:3f:8a:58:2b:b0:06:49:d0:a0:5d:7d:4a:b8:a0:82:c1:
c8:aa:1b:1f:34:7e:0f:8f:05:b5:4c:32:77:12:5a:f4:a2:cf:
fe:d6:81:e8:1f:88:80:b7:09:81:68:18:7e:d2:6f:64:df:7b:
0a:11:4d:ef:70:06:be:e0:28:db:4f:e6:6b:18:41:ff:d8:cb:
57:25:ab:1d:33:0f:59:7e:1f:e5:6c:33:20:47:09:55:16:d2:
dc:58:4d:98:1c:84:40:24:81:fa:dd:21:48:3d:e7:d6:a9:6b:
e3:fd:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:57 2025 by rpki-client