Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de3e7020-f447-3322-aa00-fd598cd4e167.roa
File: de3e7020-f447-3322-aa00-fd598cd4e167.roa (raw, json)
Hash identifier: RsbzuWsVj1ixLoKhIdPqyXnNz+PGAU6rk/Sq53p4Qok=
Subject key identifier: 36:C9:B3:AD:2B:43:B2:04:DC:97:46:DD:1B:34:C1:00:4D:8F:53:B7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E4EA84809011710BC79A36A70
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de3e7020-f447-3322-aa00-fd598cd4e167.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:4e:a8:48:09:01:17:10:bc:79:a3:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=ad70a238-a085-4995-8de6-95a056c8375c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:5b:91:1d:c4:54:96:89:b0:84:68:6c:1d:
b4:bf:fd:fe:a9:8f:3d:4e:25:35:11:7f:86:82:f2:
0a:f7:99:97:cb:27:dc:ca:c5:f5:ca:31:fd:d9:a2:
93:78:25:17:1d:e0:e1:c8:a8:1b:0c:42:56:03:93:
8a:5a:f8:25:82:a9:b4:58:c9:31:46:06:37:f2:15:
0f:6e:3a:07:80:fc:6a:4f:4c:93:36:41:5a:4c:81:
2d:81:ff:10:9b:1f:ef:8b:9c:dc:00:d8:d7:e3:2a:
e6:84:ee:f4:8f:43:2c:0c:62:b7:d9:59:05:76:02:
25:17:83:d9:44:d0:f4:06:d5:65:75:05:e0:74:27:
98:54:63:f4:8b:d3:34:a8:cc:b5:a2:f7:d7:88:10:
33:68:86:72:5f:09:ad:f0:d2:bd:dc:ab:59:99:fa:
a8:ce:38:bd:20:b8:0f:00:e6:1f:1f:5a:28:c5:94:
48:cb:3b:38:dd:df:a4:f3:b5:79:3e:f1:7d:74:8a:
bc:ad:c4:95:2b:4d:6c:77:89:2b:1e:c9:13:bc:53:
ac:34:e6:f8:6b:ef:1a:1b:ef:c4:77:76:62:29:b7:
a2:f4:3e:59:2a:23:d0:89:0d:14:8d:82:c6:4d:ce:
72:5a:6e:9f:bf:f8:d2:50:02:74:12:94:a0:b8:b0:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C9:B3:AD:2B:43:B2:04:DC:97:46:DD:1B:34:C1:00:4D:8F:53:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de3e7020-f447-3322-aa00-fd598cd4e167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:29:84:34:95:0a:63:b1:4e:a1:43:5f:ae:6f:f7:26:ce:79:
88:ee:56:5b:6a:bd:17:1b:06:60:8f:d0:cd:01:43:92:b6:2e:
9f:17:e9:1c:4e:19:f4:f6:48:da:a3:58:fe:c6:a8:b5:1a:8c:
f1:c3:fa:93:ae:97:fc:66:3a:79:dc:18:3e:32:70:91:f3:ea:
30:4c:be:13:9b:62:eb:7a:30:a5:61:b6:57:c4:f8:15:fd:c3:
3c:ac:75:db:25:4c:08:dd:44:fb:8f:36:31:18:98:f9:0f:d9:
30:85:33:ae:e8:bb:82:ab:65:47:bc:95:26:85:29:ff:7d:c4:
14:c2:27:3d:4d:5e:1e:c7:d1:2d:a3:6a:88:50:60:b7:ef:90:
89:bb:26:bd:b9:ea:e7:19:04:fd:bf:ef:a8:d4:34:bb:06:b0:
dd:73:14:41:95:4e:4d:d6:cc:26:e5:fc:c4:ad:97:78:19:77:
57:68:97:56:d4:88:a1:16:93:42:50:ca:be:71:7b:68:1c:a6:
03:07:a7:0d:80:a2:3f:17:e7:1b:3d:db:be:97:76:57:0a:c2:
db:c2:8f:c3:1e:df:37:84:37:21:ce:a2:0b:36:02:a6:b2:64:
6b:6c:40:88:a9:3c:35:3c:dc:90:e2:9e:23:b1:18:30:8d:f0:
d1:aa:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:16 2025 by rpki-client