Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc3f562d-d780-3e52-a3ff-eccf2603ca8e.roa
File: dc3f562d-d780-3e52-a3ff-eccf2603ca8e.roa (raw, json)
Hash identifier: JPI7OILc8lRUcASsF9khvO9Y3GKtwaMZ3umGyJjmQQg=
Subject key identifier: 03:0D:B6:21:5E:E4:82:ED:3B:D7:7F:89:27:67:B7:65:F2:3D:AF:E0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E5D9126FB7436F76E1DCA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc3f562d-d780-3e52-a3ff-eccf2603ca8e.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:5d:91:26:fb:74:36:f7:6e:1d:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=554091af-74f8-4bad-b551-194b66666ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:da:35:6f:bf:64:11:b1:f5:24:95:08:3f:
3d:4e:b9:90:02:db:d4:89:5e:40:4a:a7:e2:64:fe:
fa:e6:93:97:61:d6:8f:d5:95:97:9d:78:56:48:6d:
4a:46:e5:a1:4c:e7:db:7f:f2:35:58:4d:28:ab:8f:
c6:94:54:74:82:7f:a1:6b:61:b7:cd:43:54:57:cc:
27:65:92:3b:8c:90:cc:b2:a0:5f:7e:f6:76:9d:48:
e9:23:27:98:ab:b8:6f:c3:fc:83:16:25:d9:5b:ef:
1b:12:b6:1e:50:b7:69:34:9e:bd:37:28:7d:b1:81:
3f:76:ff:9d:68:2c:65:4f:02:fb:7f:35:6f:7e:5f:
51:76:3d:1e:a9:69:3a:0f:79:fa:95:ff:21:83:87:
bb:05:2f:d7:24:f4:42:57:26:e8:ca:e6:47:c1:93:
a5:08:86:7a:4a:21:77:6f:2c:08:1b:c1:0c:ed:5d:
e1:92:84:9f:11:6d:5a:30:4c:ca:60:a7:de:ff:cc:
df:bb:82:75:c8:1b:4e:40:bb:78:c4:1e:46:e3:0f:
2d:f0:8d:a4:32:62:65:f6:bc:08:02:e3:5b:70:71:
1f:06:08:84:77:1d:5b:bb:f3:b5:eb:a4:03:20:9a:
40:fa:c4:20:42:0b:4e:a2:ab:07:6a:d4:bd:6b:1c:
a5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:B6:21:5E:E4:82:ED:3B:D7:7F:89:27:67:B7:65:F2:3D:AF:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc3f562d-d780-3e52-a3ff-eccf2603ca8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:18:73:97:5f:93:d4:86:c5:bc:c9:48:b8:99:a2:49:3b:63:
ac:0b:94:92:40:ab:a3:58:67:7f:aa:fa:af:05:d2:5c:69:42:
39:0f:c3:07:f5:5a:44:81:98:f4:fb:49:9b:d4:00:48:3d:56:
5e:07:60:01:ec:08:78:6e:99:67:d6:db:f9:f8:a7:3c:61:27:
ad:e8:13:11:2f:b2:63:d8:bc:cd:a6:26:c0:59:63:26:41:58:
55:86:19:7d:b5:49:66:74:27:ba:79:74:eb:49:4f:3a:53:43:
9b:16:7e:19:96:d7:3f:26:5a:60:fe:98:98:1c:14:2c:fb:f0:
2c:a3:f3:c4:b4:bc:3e:2c:54:14:54:e6:16:05:81:2f:ea:f7:
8b:31:de:e9:3e:4c:85:6b:2f:37:90:8f:5e:03:f3:4a:b9:f4:
17:c7:f3:82:da:51:3c:88:ae:fa:91:91:57:b7:e9:11:36:70:
7c:d1:dc:5b:27:eb:8f:26:9a:33:bb:fb:9e:b1:2a:a3:6b:eb:
12:f2:36:91:06:b2:ba:50:d0:39:fc:09:65:18:77:bc:14:27:
31:81:7b:4e:6e:d0:5f:ed:60:84:86:ac:41:dc:35:1c:7f:cf:
99:44:15:d2:6e:cc:c7:38:d9:d4:bf:f1:86:2a:e2:16:f5:e5:
05:9d:ad:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:11 2025 by rpki-client