Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e63346c5-33f5-3a06-91fc-23fd2ca0a6e9.roa
File: e63346c5-33f5-3a06-91fc-23fd2ca0a6e9.roa (raw, json)
Hash identifier: YuNsswAdy2DXWpq9W/XoQtQO3qbPfFGFFSNctSo2i+Q=
Subject key identifier: AA:CE:D9:6C:DF:7F:5C:0E:A2:9D:B1:22:F5:C3:5B:C8:FA:86:31:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC90DF5F2287F7BB461EEE580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e63346c5-33f5-3a06-91fc-23fd2ca0a6e9.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.165.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c9:0d:f5:f2:28:7f:7b:b4:61:ee:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=44f3a770-0a75-4c3d-a83b-6da6356d0fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b8:6b:48:1b:32:d7:fe:44:f6:4d:b2:0a:bc:
60:1f:89:89:1e:57:e7:0e:2a:18:42:a1:7e:71:59:
f9:50:55:9c:74:d6:cf:a8:d9:4f:11:3a:92:e9:5c:
d8:87:18:a9:46:31:94:71:48:1c:10:07:5e:fb:a8:
93:e0:ff:71:0c:9f:e8:95:da:41:e1:8e:5e:c3:b0:
a9:87:40:94:8d:04:c6:97:4e:45:c6:87:62:92:05:
dc:8d:86:59:be:d4:83:7b:f2:c3:89:90:d0:c7:c8:
84:33:84:b7:c2:6f:bf:a2:58:7a:46:ae:d3:a4:26:
b7:89:0a:0f:4d:8f:97:ed:77:fc:d5:47:f3:1b:df:
33:fb:c1:13:b3:34:b4:64:fb:87:ae:47:b5:c7:bd:
3c:d7:2a:13:29:0d:e5:e9:a5:7e:5b:d0:d9:c4:21:
35:d7:a6:9d:d6:5b:ea:8c:2d:91:55:fc:16:c7:88:
42:aa:c5:ef:ac:03:fa:d5:b3:92:20:dd:94:c9:70:
a9:03:38:ff:86:01:62:3d:37:9e:e6:61:83:4f:91:
fe:25:6b:e4:66:af:79:a6:3d:38:a8:29:03:74:97:
e4:09:b3:1a:bb:01:b9:09:51:66:e2:21:8d:e3:4d:
db:51:f8:02:5e:fe:cd:2a:3f:c6:b7:73:c4:26:0e:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CE:D9:6C:DF:7F:5C:0E:A2:9D:B1:22:F5:C3:5B:C8:FA:86:31:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e63346c5-33f5-3a06-91fc-23fd2ca0a6e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.165.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:75:4e:ae:cd:d0:18:ce:d9:6b:f6:08:4b:9d:4a:50:2a:2d:
d4:40:2e:26:dc:e1:c4:96:22:cc:7f:3a:7c:e2:ec:2c:78:50:
f3:fe:39:65:84:43:72:84:0d:98:cd:08:a3:b4:0a:4c:81:28:
44:f0:2e:4d:18:40:d8:bb:ae:12:50:07:3f:ae:30:7f:f1:f7:
fa:27:72:1c:30:4d:ad:9a:30:69:ad:71:e5:ce:50:93:38:95:
ea:1c:fe:63:b8:40:5d:a1:7f:50:ed:30:e8:fa:a3:f1:1a:02:
f7:8a:9c:96:f8:87:be:72:e6:d0:4d:a3:1b:f3:2c:a5:bd:56:
34:f4:fd:d2:ab:12:63:37:91:e4:02:df:ef:ab:6d:9c:a6:02:
5d:02:44:dd:b4:cd:7e:b6:47:4f:c4:df:2f:ff:16:3e:96:f9:
33:e9:f1:32:9a:7d:e7:92:c4:6a:10:53:ec:7f:3d:96:26:5d:
21:59:5d:f8:3e:01:5d:f2:72:cc:94:40:bf:1b:d8:1e:58:fc:
99:ec:4c:7f:74:de:cc:8d:28:f1:3d:4f:9d:ef:87:0b:c6:c8:
94:3a:63:46:59:48:fb:52:60:02:cd:8a:be:f0:e5:78:d8:4c:
47:1d:f8:4a:c8:a4:e4:71:89:8d:f4:68:96:20:f2:4c:f7:a5:
21:ad:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:02:47 2025 by rpki-client