Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efa19a94-63fc-300b-8665-8520cc7dbd0d.roa
File: efa19a94-63fc-300b-8665-8520cc7dbd0d.roa (raw, json)
Hash identifier: KxGfRoDUFUV8pnhxgX18HExjh+ADScUT/c8II1ahU40=
Subject key identifier: 80:03:BA:27:64:2B:C2:FF:AA:BF:BC:E0:B0:CB:E5:5C:80:77:02:C6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053C4E0709201FDA757EBED80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efa19a94-63fc-300b-8665-8520cc7dbd0d.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:c4:e0:70:92:01:fd:a7:57:eb:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=72a6a82f-40f3-4ea7-ab4d-a6ae014e0c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:98:07:83:6c:75:c5:cd:f0:1d:83:0a:6e:58:
cc:99:71:43:43:1c:d6:0f:11:93:52:c5:59:bc:a7:
d9:a4:aa:7c:09:dd:c0:58:3b:77:bd:05:30:46:05:
f5:46:28:e3:b0:6f:0a:b2:1d:15:ff:c5:52:e5:fd:
57:d7:42:f2:8f:bb:0f:10:62:9b:fd:d3:bf:92:c5:
73:d4:4d:0a:88:bc:b3:39:da:e4:af:9c:b0:17:d2:
06:cc:0d:ef:27:ff:3c:e4:3b:5f:72:59:32:da:09:
36:c9:e7:9a:3c:35:95:cc:ab:ad:07:fb:67:56:42:
b9:8a:65:9b:49:60:72:1d:6f:ce:25:cc:d0:06:bb:
ce:94:90:fc:31:b6:56:bc:1d:12:7c:c0:ce:c9:6c:
80:00:53:89:87:d6:0a:04:fa:1c:93:5f:13:02:12:
d0:18:07:8a:05:17:ee:7f:f6:da:d2:06:d8:68:1a:
b0:f1:b3:8c:d0:36:98:19:b6:fc:ef:f9:ab:36:09:
0b:63:ec:02:8f:75:e5:f5:56:29:c3:5a:df:93:08:
da:19:ac:e8:39:d0:a6:28:cf:5f:1b:64:17:05:a5:
a1:77:fd:87:50:18:b0:77:17:4a:75:6a:a2:0f:50:
21:84:24:4c:db:a5:10:79:d1:39:50:68:30:5f:e5:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:03:BA:27:64:2B:C2:FF:AA:BF:BC:E0:B0:CB:E5:5C:80:77:02:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efa19a94-63fc-300b-8665-8520cc7dbd0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:75:3c:98:1f:8b:85:29:f8:6c:b7:f0:ec:31:0b:ab:c1:3b:
5d:26:df:20:b9:68:6d:48:10:fc:4a:1b:85:8e:70:23:62:03:
78:69:99:05:16:0c:d5:be:f7:35:9d:0f:66:fa:7c:8e:71:1d:
9c:a5:cd:77:af:49:2e:2a:a8:b0:31:31:5a:1e:34:5e:67:28:
5d:7d:06:5f:25:14:a0:79:b9:36:ac:61:e7:c6:d9:9a:66:46:
f8:78:e9:1b:c1:3b:c2:39:41:49:cf:d0:98:e0:a7:8a:1c:f0:
3c:e2:c0:a5:5a:71:99:c7:78:e6:b3:00:2c:d0:89:19:d3:78:
bd:15:59:8d:a5:09:fa:44:fd:81:fc:91:07:73:21:7f:1c:13:
97:54:50:fe:61:9c:49:5a:5b:ff:ef:40:76:1f:f8:50:30:ed:
49:23:2f:74:a3:e0:a8:72:a7:30:02:97:75:a6:79:45:f3:ae:
3d:0d:64:a8:c5:f7:e4:be:2c:04:a1:1c:13:0e:92:7f:f0:da:
6d:5b:cd:17:7e:cc:87:24:4d:a6:1e:52:d7:23:9b:f3:c3:ad:
ad:13:a2:e1:0c:d3:3f:df:7e:1f:f2:45:b3:f6:e5:fa:24:cb:
2f:bf:de:c3:74:23:32:08:14:9f:ca:f4:5a:59:0a:7d:1e:b6:
09:99:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:27 2025 by rpki-client