Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dafdd9da-48af-35d9-a0bf-c2191451a4a5.roa
File: dafdd9da-48af-35d9-a0bf-c2191451a4a5.roa (raw, json)
Hash identifier: 4rTGPIAzvArzUbTkbpdSQ3YChplSKe90jBhyKPk1obs=
Subject key identifier: CF:83:B2:4D:79:C8:89:2A:BF:1F:2D:6F:2F:49:78:0E:98:A7:35:2D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3CD611D96641EF8750FFD680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dafdd9da-48af-35d9-a0bf-c2191451a4a5.roa
Signing time: Mon 14 Mar 2022 04:00:00 +0000
ROA not before: Mon 14 Mar 2022 04:00:00 +0000
ROA not after: Mon 18 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3c:d6:11:d9:66:41:ef:87:50:ff:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 14 04:00:00 2022 GMT
Not After : Apr 18 04:00:00 2022 GMT
Subject: CN=71a11a1b-df40-4e71-81b6-ee24f9ddda76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:89:99:f8:cb:06:a2:28:eb:cc:04:87:13:
8e:51:cc:ae:65:5b:5f:71:02:ff:75:95:ca:f4:e6:
e4:fb:1d:e0:6a:92:43:14:44:9c:e9:7e:c9:86:d7:
ce:17:5e:81:9d:3c:55:98:a7:fc:08:71:d7:03:00:
77:57:de:23:d8:3b:c5:bd:d4:56:20:be:bc:c4:5c:
f4:9e:d6:0d:39:9d:e4:3e:ca:f9:06:8c:64:2c:91:
b5:0d:9d:c3:69:c8:36:af:a6:21:1c:03:eb:3a:eb:
48:23:86:df:3c:dd:62:ee:43:2a:71:99:50:a2:ab:
e1:50:55:95:5f:68:eb:0d:11:ae:e4:4b:96:41:70:
d7:e2:80:50:dc:71:d9:61:f2:4a:a4:ab:70:15:b5:
e3:e8:35:12:f2:d8:56:05:a7:c8:fd:91:22:5e:9e:
19:23:b6:4e:f5:47:2c:27:64:c6:36:c6:8a:d8:76:
4b:af:b1:65:45:2d:b3:46:36:23:cb:d1:33:6e:d8:
fd:b3:ec:48:f4:6c:86:17:59:90:92:68:9b:00:61:
3e:73:eb:eb:b0:13:9e:7c:bf:fc:b5:79:8c:d9:1b:
a5:c1:19:1e:ed:eb:8b:86:f9:6d:ff:74:60:35:9b:
43:a9:30:30:db:52:b9:3b:3e:f5:75:e4:7e:f6:2c:
68:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:B2:4D:79:C8:89:2A:BF:1F:2D:6F:2F:49:78:0E:98:A7:35:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dafdd9da-48af-35d9-a0bf-c2191451a4a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:87:32:a7:fc:15:e4:ed:58:a7:53:33:9d:b3:1b:bd:18:78:
c4:be:0b:18:6f:0d:a7:a9:ad:5e:eb:1a:4d:6d:d6:6c:fe:e4:
4a:de:f2:17:50:64:d1:bc:1d:1e:3e:cf:94:0b:ae:88:fe:57:
04:b3:de:8c:15:e2:96:20:f0:44:5c:90:67:b5:b4:8d:2b:8d:
b4:6f:55:7b:92:ac:5d:62:19:c5:83:09:d5:f5:ee:90:ac:1b:
f6:77:85:f7:cb:88:23:cf:64:a5:7a:82:d4:6a:89:d9:98:3b:
c8:c4:d5:54:83:06:5d:3b:3c:3c:83:8c:d5:ba:57:ca:b3:b4:
3d:ae:90:4d:66:db:f9:37:7e:a7:96:10:1a:d1:35:0f:47:ee:
8d:3e:e8:46:6a:6a:84:76:3c:0b:eb:22:c1:ce:5b:3a:49:37:
1d:8f:2d:82:76:1b:ca:5e:30:86:20:e2:c2:f8:66:36:9e:bd:
29:9e:b2:dc:c9:27:37:05:e8:9c:a0:17:1c:67:5e:bc:96:c9:
d9:64:c2:e6:05:33:96:98:4c:ee:f9:3d:18:6b:b9:7f:e3:6d:
45:62:45:7f:77:8c:db:a9:9f:b1:68:66:53:f8:dd:c3:2a:22:
40:6f:0d:1a:d3:8c:41:64:db:45:21:8a:a1:6f:b9:df:b2:af:
04:6b:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:50 2025 by rpki-client