Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6cbe83e-48c1-3ed5-8271-6dab72e9fbd3.roa
File: d6cbe83e-48c1-3ed5-8271-6dab72e9fbd3.roa (raw, json)
Hash identifier: VVcfBnecPPDV7fKrrKk+iQAVhmvczzki+NGhPmS9FE8=
Subject key identifier: 60:D3:BC:D1:7A:2E:51:86:BA:63:50:90:40:D1:D4:DE:72:C7:8C:BE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C0D96767028A8BFC33E3DB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6cbe83e-48c1-3ed5-8271-6dab72e9fbd3.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c0:d9:67:67:02:8a:8b:fc:33:e3:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=82ab99cd-a27b-40fe-b8b6-38516829301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a8:ed:bc:65:e4:d2:75:43:e6:85:23:e0:59:
d9:17:c2:d6:0b:1c:3d:d5:f2:1f:77:17:de:c9:15:
f6:36:2e:28:97:8a:21:65:e4:7b:b1:4d:87:68:61:
bd:e1:1c:f6:49:c8:a0:a5:99:5c:c9:30:fc:98:2c:
88:6b:10:e7:d8:d1:80:3d:63:17:a7:6c:83:af:75:
61:a7:d4:39:6b:fe:4f:9a:7f:7d:9c:37:5d:e4:ed:
3f:35:e3:74:98:39:a3:01:c9:44:f9:00:37:19:6a:
f9:9c:f5:dc:e9:c7:e6:52:3f:00:1b:1a:41:c9:16:
af:7a:9b:df:ca:48:6b:52:47:75:2f:e4:47:42:fb:
d3:30:2a:76:bd:53:16:84:fe:00:2c:6e:76:48:f2:
b8:83:85:74:f7:69:5b:20:26:05:d2:67:5d:ba:27:
c4:5d:5b:b0:b0:4d:1f:5d:9b:b7:46:ae:e4:6f:b0:
a5:23:a0:6f:ef:9c:f4:22:0f:2c:45:12:f5:b0:26:
b1:17:83:80:eb:72:fe:7b:8c:79:1a:64:06:e9:29:
dc:03:ad:00:2b:f7:94:f9:9d:04:fa:2d:13:20:7e:
27:9e:8a:40:b9:fb:6f:93:f7:2d:09:64:71:4d:ee:
f4:78:78:22:92:64:85:51:4a:de:39:c0:aa:d8:a3:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D3:BC:D1:7A:2E:51:86:BA:63:50:90:40:D1:D4:DE:72:C7:8C:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d6cbe83e-48c1-3ed5-8271-6dab72e9fbd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:c0:62:5f:be:d9:56:a3:75:4a:52:a9:c1:cb:b1:00:b5:29:
0f:44:78:91:2f:49:a5:77:ce:2f:00:b2:76:95:04:37:46:e3:
59:d9:1f:f9:14:80:0d:1f:19:11:d0:e7:b4:25:41:5e:32:aa:
06:3e:91:5c:ab:50:2f:71:97:ce:77:be:e7:9b:ba:61:92:b0:
e5:4f:c6:b9:f6:b1:32:15:67:17:cb:5f:2f:a7:d4:40:d9:71:
68:4f:c6:c0:55:d5:e7:49:27:5c:a5:3d:97:e0:17:f1:58:9f:
63:45:7a:60:27:44:f9:ff:4e:67:5b:a8:07:5d:89:3b:7c:41:
bd:48:dd:2a:da:ce:a0:d4:2d:16:21:b0:9b:2b:b6:1d:b7:5e:
76:c3:82:b5:d8:1c:aa:23:c5:c0:78:60:1c:2a:09:f7:cc:bd:
4a:e7:96:4b:8f:97:11:46:62:8e:f0:05:a8:10:66:9e:db:11:
f0:0d:11:49:f0:01:a8:d7:6f:e0:5b:e6:39:c5:a8:16:30:34:
ec:97:3f:fe:13:db:aa:35:c5:ca:fe:c9:14:cf:d8:12:c9:3d:
d5:36:ab:9c:91:fd:66:00:9b:c5:af:d4:62:b7:ac:d7:38:fe:
8e:0e:be:83:1c:79:b5:54:07:34:05:e3:7f:5c:b3:ae:d4:23:
e5:1b:b4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:54 2025 by rpki-client