Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8a413b2-ec0a-3220-8169-39c6894f3444.roa
File: d8a413b2-ec0a-3220-8169-39c6894f3444.roa (raw, json)
Hash identifier: 0IlWQ+2AtJTduXNSrfPPaalFtbXjMx3bmpCXAyirS7Q=
Subject key identifier: 85:B3:FA:18:36:EC:F5:67:F7:0E:0D:0E:18:81:82:3A:DB:3C:D8:F6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CC77EA903E61D546EBF97F700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8a413b2-ec0a-3220-8169-39c6894f3444.roa
Signing time: Mon 31 Jan 2022 05:00:00 +0000
ROA not before: Mon 31 Jan 2022 05:00:00 +0000
ROA not after: Mon 07 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c7:7e:a9:03:e6:1d:54:6e:bf:97:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 05:00:00 2022 GMT
Not After : Mar 7 05:00:00 2022 GMT
Subject: CN=b1de6a6a-8372-4820-9fa0-42176d3c209b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:e9:d7:80:e4:3e:1e:84:70:8c:b5:23:ce:
bc:c0:c9:46:7b:1d:f5:cd:6c:9d:9f:95:df:7b:18:
c0:06:48:ca:8f:d5:dc:7b:25:13:b9:26:71:7d:18:
89:5f:44:11:54:98:fe:01:40:34:38:bd:56:11:f7:
63:2b:5b:fb:22:f2:1e:5b:ea:a1:52:2c:0c:b3:58:
c8:a7:1d:bf:26:ae:c2:4a:75:90:37:44:77:61:17:
5f:16:08:6f:df:ad:01:d2:d4:37:28:4b:7a:2c:2a:
35:de:dd:04:92:57:e1:b2:d6:18:1a:ff:75:ac:5d:
90:8e:67:c1:e9:49:e3:af:a5:4c:de:69:8c:30:80:
c5:2d:63:f3:30:e2:a0:fb:d7:8d:e3:cb:6b:80:bb:
48:d0:8c:f2:3c:dd:5c:5f:63:b2:65:e4:74:ce:b2:
c6:66:70:95:c4:8d:8c:3f:bc:5a:22:2d:3e:20:b7:
82:4c:84:b6:6e:4c:f8:d4:29:ba:2a:0c:ea:fd:9e:
00:40:b5:c4:27:67:b3:5c:e9:ba:46:7a:13:a7:e1:
ad:8a:90:2b:e7:55:fb:0a:89:bb:ef:a2:ef:56:f3:
01:72:4a:af:03:95:f8:9e:bc:39:25:31:cc:fd:1b:
4f:7b:8e:f7:9b:6b:1b:d6:bd:f0:19:12:bb:8e:28:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:FA:18:36:EC:F5:67:F7:0E:0D:0E:18:81:82:3A:DB:3C:D8:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d8a413b2-ec0a-3220-8169-39c6894f3444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a0:ed:89:e2:06:28:2b:7b:ea:e5:da:3d:85:39:db:29:8f:
48:9e:59:e2:11:8a:f7:df:ca:21:49:e1:d0:6d:04:85:66:7e:
c1:28:69:a2:e9:c2:77:00:63:5e:b7:dc:00:08:63:ad:01:80:
ec:55:52:8b:44:81:57:53:9b:89:d9:f4:90:58:4c:4e:e5:ae:
d8:02:4b:5a:2f:19:c4:ef:3c:58:03:11:2e:ef:da:82:2e:18:
a3:66:cb:72:17:c4:16:6e:e3:f0:6c:f5:6c:1b:73:d1:27:0b:
95:a9:01:37:ec:9c:59:16:0a:48:18:76:b9:24:96:ac:c5:52:
13:12:45:98:ae:67:be:82:73:34:a2:c5:a7:96:5a:d2:7f:3d:
22:ea:f8:fd:f8:6e:ad:fc:b7:ad:78:5b:9e:ad:2f:68:6b:4a:
1e:65:c2:0a:9a:8f:5b:1b:09:ee:ad:71:5b:f6:dc:db:2f:e1:
63:17:a0:de:e2:5a:06:9c:29:ad:0a:8c:4d:6f:f5:8a:96:a3:
0b:b8:c5:10:24:5a:6b:3d:28:98:84:b4:bc:10:4e:6b:31:b6:
1e:f4:62:23:b5:42:07:37:6d:c5:8c:19:33:a5:31:c5:e1:18:
fe:9c:18:0a:c8:28:02:80:8e:11:7b:e1:e5:e7:a4:fc:12:45:
2a:67:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:39 2025 by rpki-client