Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e24a41f7-ce07-3dbb-a333-09023abf7119.roa
File: e24a41f7-ce07-3dbb-a333-09023abf7119.roa (raw, json)
Hash identifier: TcqehAGcJS12kLJmjVZCWWA9eja+iY9Vb2tXI3Ju7lU=
Subject key identifier: 95:78:D6:B7:1D:03:66:0B:2A:49:74:D8:97:46:C1:80:76:EB:E8:2D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400056424495F7C376A344A140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e24a41f7-ce07-3dbb-a333-09023abf7119.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:00:56:42:44:95:f7:c3:76:a3:44:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=c2627c77-f93d-4620-9e72-c0f68d10182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:7c:57:22:5a:46:d4:30:d5:dd:e7:99:df:
e1:94:e0:cb:ad:9e:9e:dd:10:b4:b0:e1:f8:b8:30:
83:d9:2c:48:e5:ea:74:b1:ea:5f:a6:74:fc:2e:8d:
6d:68:60:ed:d9:3a:31:7a:95:d7:66:27:ea:2d:76:
5c:e8:2f:69:6f:3d:0b:07:9a:ce:df:32:5c:3f:66:
b8:de:1e:20:13:a0:a1:63:8b:62:f4:e1:cb:ab:2f:
4e:a1:00:a2:51:e0:e6:5a:06:df:69:3b:62:d3:ff:
31:14:20:76:a4:97:28:91:70:fd:66:df:08:0d:81:
d8:ce:9f:47:9b:6e:66:d8:d2:60:cd:cb:32:fa:ad:
8a:2b:cc:49:e8:74:ca:e1:c4:35:8b:c9:93:79:99:
89:d9:c1:dd:fa:a9:4b:87:fe:64:1b:6e:0f:96:46:
b0:cd:4c:4d:39:3d:b2:53:6b:7d:cb:c9:c3:34:58:
6a:0f:45:9d:27:8a:33:22:ce:c2:dd:94:40:84:23:
43:ad:3e:e0:be:6b:75:45:a4:7a:34:d3:26:56:d3:
27:4d:19:b7:0d:47:0c:db:e8:d1:75:b3:b8:32:17:
35:f3:a2:b9:95:fa:1f:af:80:cd:5a:cc:68:e5:dc:
00:b6:0e:e9:fa:f2:84:f7:f1:34:80:64:ee:f7:21:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:D6:B7:1D:03:66:0B:2A:49:74:D8:97:46:C1:80:76:EB:E8:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e24a41f7-ce07-3dbb-a333-09023abf7119.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:96:c0:c7:56:06:ea:e0:cf:b7:6a:96:04:26:bd:a4:fc:25:
dd:26:4c:52:60:f3:11:f0:b7:07:35:d4:86:f1:bf:e5:92:43:
3c:9a:9c:44:96:2a:2e:67:dc:3a:c0:10:4a:c6:e4:3f:3e:7a:
b2:75:6c:f7:d4:d8:2a:59:4d:6f:dd:c0:60:a9:2e:cf:24:3e:
a1:f0:6a:6c:ea:7f:f7:0e:d3:65:ea:be:e9:cd:7e:5a:10:dc:
21:d3:41:22:20:9d:c2:fd:0b:58:c6:78:4d:50:c1:29:c0:de:
7a:b8:d1:66:4e:6e:67:4c:09:d6:69:c5:06:54:1b:34:a3:f7:
39:f1:74:f0:13:aa:f3:ed:21:38:e7:70:22:cb:57:b5:1f:c8:
bc:0a:14:59:14:f5:bd:f4:78:83:2b:0b:4b:08:10:10:59:f9:
0c:50:1e:43:86:d2:de:c8:24:fd:d7:05:c6:01:db:85:ca:be:
5c:3f:07:22:ad:41:85:10:47:fd:ff:cc:0c:8c:37:9c:72:5f:
7f:b6:89:1d:58:0b:78:ac:b7:5c:9a:dd:f4:de:2e:1d:0b:99:
96:e4:17:63:98:3f:e2:43:8e:f8:5e:b3:7e:c5:b7:ea:fe:3c:
45:ef:a8:97:30:21:18:07:d7:b5:63:16:d3:50:3f:f6:e1:23:
49:09:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:05 2025 by rpki-client