
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db49c577-a396-33dd-afcf-39a8cea7cd79.roa
File: db49c577-a396-33dd-afcf-39a8cea7cd79.roa (raw, json)
Hash identifier: iGHJsSLWKCP8U5ON81aCc99j1PjRFbNWXHZncHXQ/5w=
Subject key identifier: 10:D7:BB:B6:B5:43:A3:5B:53:BC:37:D8:85:C0:E1:6F:ED:CD:12:47
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840835F8171B4A77299F0E13A40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db49c577-a396-33dd-afcf-39a8cea7cd79.roa
Signing time: Sun 08 Jan 2023 12:00:00 +0000
ROA not before: Sun 08 Jan 2023 12:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:83:5f:81:71:b4:a7:72:99:f0:e1:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 8 12:00:00 2023 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=6852c025-9c1c-4bda-953c-0ffef26771cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:f1:e0:36:d0:c2:8b:65:d7:52:79:3c:7f:
e7:14:c2:cc:1b:2b:ef:eb:d6:f5:d1:d5:99:9c:ba:
19:6b:e2:88:81:c5:64:87:fd:4c:e2:29:47:e4:11:
cc:36:cf:cb:fe:c5:03:46:46:b0:51:14:05:ca:34:
26:05:50:3a:d8:31:fc:e5:3e:ee:4e:97:39:f1:f2:
3a:66:3d:d4:c8:52:eb:e4:a0:50:46:af:b7:ea:e5:
4e:e2:a8:66:76:06:f0:ec:9e:8d:b7:ee:9e:f5:92:
74:1e:e8:63:d9:75:46:6e:9f:d3:8b:57:1a:74:5d:
44:a4:73:b5:28:2d:43:e2:6e:83:ac:10:6d:ea:dc:
e4:70:36:18:38:79:3d:35:7a:b3:91:eb:10:80:c1:
61:93:50:5e:67:02:49:30:35:22:67:c3:55:88:9a:
68:79:6b:ee:bb:c1:76:8f:c4:90:90:da:73:5a:32:
4b:c8:ad:e9:c1:24:dd:d6:5a:ff:46:1a:31:48:90:
37:b0:34:49:8f:84:b2:04:1e:8b:a4:1a:3c:61:8a:
c0:e1:93:3a:c9:4c:de:be:cd:b7:93:8b:f1:65:5b:
18:24:07:09:49:53:eb:d1:71:b1:4f:3d:49:a5:d8:
88:08:ef:5b:50:65:fb:71:4d:8f:0a:4b:08:4a:27:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D7:BB:B6:B5:43:A3:5B:53:BC:37:D8:85:C0:E1:6F:ED:CD:12:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db49c577-a396-33dd-afcf-39a8cea7cd79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:66:28:66:75:58:4b:33:c8:f7:fc:c3:e7:94:50:45:9a:4a:
e8:ee:b3:ce:a2:b9:d4:b0:c9:c8:91:6e:c1:02:b5:0b:e2:5b:
71:74:73:99:9d:d2:38:05:3f:d3:4a:21:46:43:16:55:40:14:
8a:be:ee:05:94:ad:71:ca:85:65:10:57:b9:36:b9:dd:6f:a1:
85:d0:ee:14:fa:67:8c:84:d2:d3:d9:9d:34:16:25:ac:60:12:
77:84:c9:21:67:e3:89:d1:94:cc:f7:2c:a4:44:88:e8:0e:26:
2e:75:58:f0:ad:12:d8:ab:c4:db:7e:ea:87:10:5d:b9:c2:df:
b1:56:67:3d:21:c4:15:44:ff:e2:88:4f:84:2c:e6:7e:51:a5:
c2:56:d3:06:2c:b6:fa:26:a2:87:2d:94:30:b3:52:b9:06:03:
27:8a:8f:55:c9:89:51:26:27:39:39:85:aa:b5:12:8c:9f:06:
3e:c8:8c:ed:be:61:d7:d5:0e:bd:2c:58:31:79:e7:86:0d:2b:
67:f9:7c:d1:e2:12:76:32:21:37:d1:2c:00:6f:ef:51:cc:6a:
d2:bf:54:88:0d:f8:77:a2:4c:b0:0c:68:7d:e8:99:9b:73:4c:
d2:7e:fb:90:57:79:46:06:3d:a6:d4:4c:9c:49:5f:0b:e3:dc:
aa:c2:d1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:06:56 2025 by rpki-client