Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1c0329e-b118-3622-a969-69342d5d8d8c.roa
File: f1c0329e-b118-3622-a969-69342d5d8d8c.roa (raw, json)
Hash identifier: DiwSXsDwH4cA8xfiQjFNWQjdo0eyCTwCCdtX5puv0Co=
Subject key identifier: 05:32:96:5E:8F:1C:E0:EC:41:32:19:89:A0:0C:6B:69:77:3F:BA:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400599B2C8A796D36BA00B7880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1c0329e-b118-3622-a969-69342d5d8d8c.roa
Signing time: Thu 24 Nov 2022 12:00:00 +0000
ROA not before: Thu 24 Nov 2022 12:00:00 +0000
ROA not after: Fri 30 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.216.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:05:99:b2:c8:a7:96:d3:6b:a0:0b:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 24 12:00:00 2022 GMT
Not After : Dec 30 05:00:00 2022 GMT
Subject: CN=9e58764d-86a5-4818-81a7-4020ceebeab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:8d:f7:e3:00:a9:68:98:22:b8:18:75:b6:
38:5a:35:e4:86:06:86:15:8e:f5:4d:33:3d:70:2c:
45:33:d3:e0:74:ac:6d:f8:34:de:f7:a3:79:3e:84:
b9:cb:a1:44:2e:2d:f1:c8:e7:30:af:23:12:9d:20:
7e:3e:1b:2f:41:d4:93:6a:86:0c:2a:9b:38:61:99:
42:0b:2e:81:7a:3f:7e:f2:80:8b:22:f0:51:9b:24:
f2:55:d3:20:aa:7f:f5:46:57:bc:41:45:24:51:16:
6a:13:bd:1c:ee:83:d1:f3:78:ca:55:fd:eb:b6:1e:
15:69:d9:36:ee:7e:aa:ea:f7:3a:1f:98:fe:93:5a:
0a:cd:6f:cc:ee:74:89:ac:5a:ac:fa:01:ba:b5:74:
f4:7b:53:7f:c1:1d:7a:6a:f2:fd:08:63:ba:8a:3a:
f3:e8:0f:f8:39:da:a7:1c:af:c0:2b:db:3b:19:5c:
c0:af:72:c8:bd:2f:cd:10:e9:0b:ef:9a:c3:80:7a:
a0:bc:4c:92:84:f7:22:11:09:37:2d:d3:d0:ee:97:
bd:c0:cd:e4:a0:c9:5f:1b:b4:35:f0:44:76:2e:dc:
7b:ee:af:7c:68:a1:db:59:17:ac:52:60:d9:da:04:
f7:d4:4b:41:87:08:36:9f:0e:2b:54:4b:d8:36:c3:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:96:5E:8F:1C:E0:EC:41:32:19:89:A0:0C:6B:69:77:3F:BA:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1c0329e-b118-3622-a969-69342d5d8d8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.216.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:a8:ba:6c:ca:da:85:75:f6:07:ad:72:64:7c:55:81:b6:1a:
b3:81:d8:97:0b:f7:07:07:ce:a0:a3:35:3b:ed:fa:23:e3:fa:
e0:e9:28:ff:b7:91:97:77:44:22:a0:9e:da:05:cf:39:7b:6b:
9e:da:68:92:2a:77:8e:e9:90:77:6f:89:17:48:92:52:4d:cf:
ae:0e:77:5b:99:6c:c8:c0:b6:39:13:36:e6:1c:ee:92:92:d2:
2c:e2:a1:31:9c:0d:e5:5e:da:a7:fe:ba:56:43:89:a3:36:d6:
33:7e:bf:b3:39:8e:29:c0:33:a8:35:f3:3a:2c:69:4a:14:50:
a8:99:5c:f4:6e:25:3c:27:d4:12:95:e4:ad:96:e6:f3:cc:bc:
3b:78:72:55:3b:d4:2a:08:51:ab:db:e8:80:b5:25:0b:72:29:
43:2d:9a:89:f9:4f:4f:d1:3e:82:30:ba:ff:92:84:ef:b4:d5:
d6:0c:da:d8:b7:72:9c:ea:14:f0:9b:ae:21:fb:2a:65:f1:94:
71:5a:c2:b9:03:dd:a4:7a:1e:95:29:e9:d2:83:e6:54:14:2c:
c6:41:17:35:d1:ee:1f:5e:d8:3f:06:cc:5d:8d:e2:bb:eb:f5:
fc:13:48:34:60:9d:da:c3:d5:c8:ee:8a:72:c9:f4:28:03:da:
a7:f4:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:13 2025 by rpki-client