Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9cce710-819f-33cc-a0c1-84ff33646a69.roa
File: e9cce710-819f-33cc-a0c1-84ff33646a69.roa (raw, json)
Hash identifier: sCVAYWEU9fq7osX5cpYwjx3DMkSVhBdCuHoJfc6xajY=
Subject key identifier: EB:B9:43:0D:79:DB:9F:6C:B4:B8:25:52:3F:01:27:49:D2:0B:02:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405C3B5C79D5D9B54195D08440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9cce710-819f-33cc-a0c1-84ff33646a69.roa
Signing time: Sun 25 Dec 2022 12:00:00 +0000
ROA not before: Sun 25 Dec 2022 12:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5c:3b:5c:79:d5:d9:b5:41:95:d0:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 25 12:00:00 2022 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=4645ac22-a409-42a3-9dc5-f8e781bbba92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:8b:17:e7:e6:82:56:77:d1:c6:f9:23:5c:
77:28:42:ee:0f:9b:3c:f4:4c:f1:3e:8a:17:fd:45:
9f:74:be:6b:6b:2a:33:d1:50:6b:7b:46:12:60:0a:
9b:9b:ac:88:51:87:f4:cf:f0:35:8f:b7:bd:2e:e2:
0e:56:e0:04:59:bc:a4:b1:10:5f:bb:f5:dc:e4:b3:
26:71:68:17:9b:a3:99:7a:f4:6b:3d:aa:5a:92:f0:
92:e8:ea:64:0f:22:7b:28:07:3f:31:dc:27:db:fe:
1e:28:98:a1:2a:b5:c0:b2:f3:e9:8b:1a:45:17:50:
70:ee:1e:e2:2a:70:16:72:c4:c4:28:3b:ef:03:3c:
df:a7:82:77:c8:e8:48:fd:93:2a:c9:62:20:f4:7f:
f4:ba:64:70:3c:67:6a:fd:8f:c4:bf:4a:9b:d5:e6:
d7:d8:53:e9:72:11:b3:2d:8b:0f:21:41:12:de:61:
64:5e:a1:8a:09:49:e1:0b:15:73:73:33:5d:74:9b:
3f:45:24:c2:bf:26:6c:13:d2:f8:ab:83:c0:01:28:
0c:9c:e1:15:9a:18:f2:33:36:c7:09:c0:00:20:c6:
28:56:40:4e:e4:7d:3b:b3:f7:c6:ba:80:42:15:0b:
dc:43:8e:90:dd:c9:2e:07:a3:78:71:15:c2:a0:e2:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:43:0D:79:DB:9F:6C:B4:B8:25:52:3F:01:27:49:D2:0B:02:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e9cce710-819f-33cc-a0c1-84ff33646a69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.234.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f2:e2:c5:45:31:fe:52:6a:3e:75:95:fe:7e:e9:e1:df:71:
52:0c:af:5e:e1:d3:1e:18:76:71:22:cc:34:23:f4:39:2d:c3:
c1:98:72:c7:c0:8f:8f:b3:6f:78:97:c1:98:50:80:de:59:66:
a6:2b:77:5c:23:b2:f6:d4:46:46:9c:44:df:86:fd:d7:30:69:
6c:dd:1d:1f:22:84:d8:03:8c:59:fe:c5:d6:7b:38:db:4c:95:
08:3b:36:b6:b3:3d:55:62:8a:7d:21:21:c0:12:fb:55:33:95:
b4:80:71:95:86:c0:ee:93:6a:e1:c3:5c:8a:42:3a:63:23:77:
c5:4f:1c:de:00:42:fa:88:04:0c:c7:d6:f6:6c:aa:83:70:09:
37:60:f8:24:12:0b:56:c2:4f:48:db:45:37:73:3f:21:40:64:
04:63:56:1f:ed:b4:b1:ae:16:22:40:56:ec:9c:b5:f1:99:f1:
4c:f3:71:3b:59:bf:0c:ab:84:a1:99:7e:16:d4:c2:9b:8f:4b:
74:a0:7f:37:1b:32:3c:75:e1:de:c7:1d:2a:a4:96:fa:dd:fb:
31:a3:83:e7:24:29:94:af:87:76:d6:8a:c3:bd:00:72:a6:4b:
7d:86:24:a2:d3:ff:9b:2f:c9:1a:08:15:cb:12:48:c8:f0:e4:
e5:2a:a3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:13 2025 by rpki-client