Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db4aa9e6-8391-35fd-9dab-8b85322b12cb.roa
File: db4aa9e6-8391-35fd-9dab-8b85322b12cb.roa (raw, json)
Hash identifier: N9H/oMYfuOfez5TlsUGlb27OJWz2FI1lCTCmkutMkl0=
Subject key identifier: 1B:59:D8:E9:F4:E5:01:B9:9E:B4:9B:8E:EC:F0:59:CE:0E:31:01:C5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF66439AC041FEE6C397D8040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db4aa9e6-8391-35fd-9dab-8b85322b12cb.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 172.103.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:64:39:ac:04:1f:ee:6c:39:7d:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=c2cd772b-26a2-4b0e-a3ae-314296a33b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:49:64:e2:b1:14:ac:0b:84:cc:e6:c8:28:
e5:27:db:70:f5:0d:74:99:ec:b7:8b:06:bd:88:13:
e2:11:e6:5e:00:39:75:c8:4e:1f:05:bd:1d:1d:b9:
04:b2:b0:61:d0:99:c6:08:6f:93:87:22:21:4d:f9:
22:de:1f:fd:7c:5f:84:91:5c:86:07:69:f4:72:88:
a5:84:e9:58:75:f8:9a:0f:21:16:bb:b4:bc:15:69:
2f:33:b7:5f:bd:ba:49:9b:2a:7a:b7:9c:67:0e:34:
c4:2e:74:18:72:3c:f9:5b:28:e3:16:83:b8:dd:69:
b0:0e:3e:78:bc:a7:df:b3:50:f6:fc:74:db:28:e2:
91:ae:1a:7c:95:82:49:78:f0:cf:75:f4:87:2d:e2:
9c:29:e1:c2:e0:5f:8c:8a:8a:1e:cb:c8:63:dc:99:
3a:9d:10:d0:01:03:51:40:68:d7:ef:fc:21:a8:76:
9e:19:ba:99:c8:9b:c7:83:ea:bc:f7:26:c0:a6:8f:
b3:0a:26:a0:40:31:9f:92:05:95:08:4d:76:51:9d:
51:fc:39:0e:9b:c7:d1:f8:18:df:5f:1c:7a:05:58:
79:91:d2:92:31:f6:b8:f7:56:8e:97:e4:3b:5e:06:
72:80:79:8e:1b:ab:22:39:87:99:22:cd:58:c3:85:
96:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:59:D8:E9:F4:E5:01:B9:9E:B4:9B:8E:EC:F0:59:CE:0E:31:01:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db4aa9e6-8391-35fd-9dab-8b85322b12cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
172.103.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:39:f4:04:6b:87:d6:f5:7b:83:fa:72:e5:ef:e0:a6:73:4c:
7e:12:91:75:46:41:42:4d:df:ca:1c:cc:82:ff:6b:99:7f:a8:
7a:49:b5:b6:ef:68:89:bb:21:1c:29:c8:68:bd:58:2d:88:c1:
e2:dc:4d:b9:36:0e:be:09:e2:37:ac:48:01:c1:ad:f3:65:6d:
37:57:77:52:c1:30:d7:32:5a:c9:f9:45:aa:b0:72:9d:4e:98:
4d:f0:70:a0:0a:a9:43:c1:56:6e:00:39:79:3a:45:39:a5:1a:
8a:f6:bf:b2:46:aa:c1:c4:f2:48:95:59:7a:1a:52:80:c8:c3:
cb:6f:fc:74:42:82:82:89:88:98:01:5e:8d:d8:d3:80:26:a0:
2b:42:49:bb:55:d0:b8:36:f2:f7:36:8a:81:4c:32:6e:78:27:
4c:51:90:d7:69:92:f0:50:d7:d6:ab:6f:37:f4:d6:79:c8:0a:
ad:51:7f:14:fb:1a:0e:08:13:8e:32:c4:b1:a4:ab:bf:77:96:
e4:b0:e1:3d:1f:08:90:fa:dc:e4:35:7e:a9:fe:ab:e6:d2:af:
b5:3d:c9:10:8a:40:6f:55:9b:4e:57:d1:68:3d:c8:c4:c1:76:
70:da:a9:29:0e:31:9e:6e:56:9d:27:5f:a2:f0:73:19:6d:bf:
c2:61:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 06:54:15 2025 by rpki-client