Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e87000ef-c911-3ab4-961b-1e500daca116.roa
File: e87000ef-c911-3ab4-961b-1e500daca116.roa (raw, json)
Hash identifier: AW9y1PClzTeano+ALveJCUMyAO+9fxfkAO6iSCyK2OY=
Subject key identifier: 49:BA:8A:7B:E9:1E:28:2F:1E:23:F1:9C:A2:FB:76:3F:AA:86:32:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB86AA72CD3A16174FFEA1600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e87000ef-c911-3ab4-961b-1e500daca116.roa
Signing time: Thu 27 Oct 2022 21:18:08 +0000
ROA not before: Thu 27 Oct 2022 21:18:08 +0000
ROA not after: Fri 02 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b8:6a:a7:2c:d3:a1:61:74:ff:ea:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 27 21:18:08 2022 GMT
Not After : Dec 2 05:00:00 2022 GMT
Subject: CN=8e0a7de2-bb56-4574-ba80-771207936337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:6d:9a:b1:a6:d0:b0:82:61:4f:2e:f9:ce:
f2:40:b6:72:56:70:43:ce:17:a5:8b:c7:32:0f:89:
0d:1f:45:06:0f:67:be:f0:1a:61:6b:ba:0d:21:11:
a7:05:cd:ba:a9:aa:cd:94:b7:2a:2e:3b:e3:7c:4d:
df:a6:19:a0:df:d9:bd:45:f6:8d:99:94:77:8f:c7:
21:da:ea:99:cd:e3:bd:c1:01:a4:d8:62:76:0e:34:
52:68:38:e7:3b:28:c0:9d:c0:86:89:28:d9:f0:d2:
33:b1:93:5c:40:68:8f:3c:66:9c:28:0c:38:01:f5:
3d:84:f3:86:02:b5:3d:2c:2c:3f:b0:6f:26:da:83:
46:c6:28:29:78:91:d1:99:6a:75:60:c5:da:ea:52:
43:67:7c:b1:48:97:7d:7b:b1:18:79:a2:0c:4f:fc:
6e:ea:53:60:2f:c3:b4:8f:ab:31:85:b6:e3:c3:77:
27:7c:c1:c5:82:d8:fd:e3:a1:7f:ce:86:16:bf:97:
25:ac:87:08:d9:84:ae:df:0c:87:86:a9:da:44:b8:
3f:f9:54:3a:ae:4e:83:2b:62:e3:17:44:f3:4a:66:
e5:1e:3e:f6:53:f8:c4:04:32:3e:79:40:6a:13:54:
5e:13:0c:31:f4:52:71:e8:8b:80:6b:7a:ad:d1:91:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BA:8A:7B:E9:1E:28:2F:1E:23:F1:9C:A2:FB:76:3F:AA:86:32:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e87000ef-c911-3ab4-961b-1e500daca116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:91:64:14:2c:04:c1:30:f4:f9:20:07:ac:7c:0c:05:a2:cb:
cd:d7:9e:87:11:47:fa:ff:e6:20:29:74:62:45:98:d0:f0:07:
5f:a2:a4:aa:54:f8:59:16:0b:d7:ba:c0:6e:07:34:cc:ae:df:
21:e5:d9:38:73:18:97:cd:1f:e9:17:25:24:47:ec:b1:7e:7d:
fa:cd:ad:87:31:c0:6d:6f:67:f0:4e:20:a1:33:4d:3c:44:6d:
bc:2e:47:86:fa:4f:8a:90:23:d9:b5:97:4c:b4:6b:cc:bb:0e:
f0:c7:ba:cd:9e:04:30:04:c9:c0:4a:4a:3b:f3:38:4d:50:76:
c6:fc:90:e7:58:0e:75:dc:3f:d9:ca:10:39:b8:df:08:1a:54:
c2:d0:91:e4:da:0f:bd:f3:93:dd:39:5d:36:bd:bf:b9:2f:08:
92:fd:88:0f:fd:4e:60:a8:a3:15:da:26:03:e2:0a:d9:33:8a:
33:fa:a8:af:ce:8a:87:3f:9a:78:5e:68:5e:ba:ab:c8:b5:7f:
df:25:80:01:00:9f:a5:a7:c9:af:92:f5:25:07:6b:bd:a2:96:
92:7a:2f:35:fd:05:bd:ff:6b:e1:30:68:ae:98:32:c4:bc:14:
24:0b:2a:b8:bd:e6:77:d1:70:99:bd:48:64:aa:fe:b9:8a:4a:
76:53:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:30 2025 by rpki-client