Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea898e35-3aa1-3528-a20f-4f816a757fe2.roa
File: ea898e35-3aa1-3528-a20f-4f816a757fe2.roa (raw, json)
Hash identifier: VyZgQG86MJk0W/o7v3rNBrVYKLvLV6gXpiya5h01XF8=
Subject key identifier: B5:3D:E1:ED:29:42:B9:56:DD:60:51:96:3E:5E:68:EF:3D:0C:11:2C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402CAF671EC60A36EFE8D24C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea898e35-3aa1-3528-a20f-4f816a757fe2.roa
Signing time: Thu 08 Dec 2022 18:27:08 +0000
ROA not before: Thu 08 Dec 2022 18:27:08 +0000
ROA not after: Fri 13 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 40.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2c:af:67:1e:c6:0a:36:ef:e8:d2:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 8 18:27:08 2022 GMT
Not After : Jan 13 05:00:00 2023 GMT
Subject: CN=2cb1345b-268b-45ab-b225-76ce0d4805b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:8b:66:ae:06:cb:89:d7:0d:f8:55:72:08:
dc:51:51:9b:e4:46:b3:d6:e2:68:9a:78:f0:06:3d:
d3:8b:56:4a:c6:24:e6:46:ea:60:70:74:52:1b:7a:
de:ad:59:3d:85:d2:96:3c:cb:ac:15:55:d1:3d:69:
a2:6d:8c:c1:e8:b4:2d:fb:8e:38:ae:cf:22:c8:c5:
8c:10:ed:e7:a7:83:8a:47:7c:a9:af:03:41:3f:d2:
b7:48:ad:ea:6d:76:4e:36:d1:43:40:8e:fd:0b:23:
55:63:aa:20:9b:f6:82:f0:91:b0:5f:ce:8d:79:04:
e4:01:40:f1:22:52:da:e2:cf:70:12:1e:39:41:bd:
b2:77:e9:2b:21:10:bd:ac:96:3f:ea:39:31:60:aa:
4d:c4:0a:68:8f:ba:6c:bb:55:93:52:e5:1f:f4:7b:
a6:57:13:e8:76:a7:50:07:b8:bf:71:be:df:5e:03:
cb:e2:24:90:1e:d8:fd:87:41:9d:e8:b2:36:f3:ca:
84:1b:7e:a6:9b:77:a7:78:c2:bd:95:4f:ab:65:72:
3d:37:a0:d7:fa:c8:00:83:66:7f:79:93:81:81:a2:
bb:03:2c:3f:5d:7d:81:cd:00:8b:c5:5d:31:1f:ec:
6f:5d:c1:2e:3f:0f:cd:b0:20:34:44:d1:f9:17:f6:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3D:E1:ED:29:42:B9:56:DD:60:51:96:3E:5E:68:EF:3D:0C:11:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ea898e35-3aa1-3528-a20f-4f816a757fe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:8e:24:c9:da:28:9d:95:4b:21:86:d2:96:b7:1e:0f:a4:b5:
45:cf:d0:cc:b1:87:da:da:96:8d:94:46:42:fc:4f:72:22:20:
e6:11:b3:3c:fd:7c:57:14:7b:f4:e6:9d:c6:a5:69:70:01:b4:
d1:d3:5b:4d:c5:2a:cd:1b:15:02:c2:87:08:02:40:2a:15:dd:
5f:17:61:8e:43:cc:b7:9a:95:cd:d3:cd:d9:fa:ea:3c:29:24:
cd:44:32:a5:53:b3:58:e0:fc:ee:0c:81:3c:b5:ca:ef:22:66:
8b:30:bf:44:38:26:08:a0:8a:b3:99:8b:44:af:9e:6e:f1:8b:
46:fb:7b:e9:a6:3a:33:13:73:27:7a:4d:61:b0:c3:0b:d9:85:
1d:69:b4:a2:87:52:9c:3e:31:9a:72:ea:7c:91:7c:5f:94:2c:
f8:72:f0:cb:c2:f7:89:28:bf:a4:c0:81:50:fe:75:d2:ff:27:
8d:27:cd:97:0f:22:a1:77:b4:8d:5a:57:9a:4d:a7:e5:52:7e:
71:d9:d7:83:9e:89:a8:09:5e:d7:21:6b:50:77:5d:d2:83:f6:
77:4a:02:a3:38:12:be:a6:64:f0:40:d4:29:cb:04:99:91:f4:
65:77:88:ba:39:ea:72:1f:5c:90:b6:5e:e1:fa:1b:57:dc:67:
5b:a2:08:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:35 2025 by rpki-client