Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc18bf59-8875-3ae3-ad53-0632925e70f8.roa
File: fc18bf59-8875-3ae3-ad53-0632925e70f8.roa (raw, json)
Hash identifier: 4UkojI+a24bT2WYPza/nOmifxLfhrMOANmrCxc9oLeo=
Subject key identifier: 65:F8:58:2D:48:F9:DB:95:05:95:3B:71:28:28:2E:66:A0:B8:23:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA838C696CA5852AD5EC9FE10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc18bf59-8875-3ae3-ad53-0632925e70f8.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 172.103.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:38:c6:96:ca:58:52:ad:5e:c9:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=58cd9b5f-0f10-42ce-92d0-431fb8216570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:ca:db:44:52:ad:06:90:d2:7c:96:11:6b:
d0:55:0b:36:89:c1:77:00:28:95:a6:70:8e:03:b4:
eb:f9:1d:e5:b1:2a:20:11:3a:2c:e2:51:d3:33:ba:
98:3a:f5:df:c3:53:dc:fa:63:b9:3e:5a:58:a0:db:
38:7c:5c:02:ce:c6:1e:56:a0:fc:2b:41:19:ed:95:
ae:02:35:c2:24:a7:26:94:54:4b:c7:96:47:c2:f7:
20:44:85:22:4b:e9:d4:54:8f:90:b4:19:65:12:e6:
4b:0e:4d:dc:d1:ac:a7:b8:6c:7c:37:e1:35:5c:f9:
4f:85:82:dd:dd:7c:44:38:ab:2c:f6:28:20:5c:85:
f1:af:a9:81:14:6b:1a:59:b5:9b:ea:4b:64:97:b0:
0b:83:a0:e8:ea:1e:f3:4e:82:65:2e:6e:fa:61:b9:
ea:a0:f5:6c:e4:01:c7:c6:20:7c:82:72:32:f3:a9:
4a:77:d2:db:7f:b7:bb:ac:8d:26:cc:cf:3d:ab:dc:
88:4d:14:8c:3c:52:53:89:3f:58:aa:9a:71:dd:dc:
45:ef:66:4c:81:29:57:12:25:4e:43:1f:22:db:e5:
7c:f3:19:11:f0:57:c1:96:24:35:9f:8d:6e:0b:d3:
55:15:d8:2b:94:0f:fa:b2:13:47:28:c2:11:d1:9f:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:58:2D:48:F9:DB:95:05:95:3B:71:28:28:2E:66:A0:B8:23:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fc18bf59-8875-3ae3-ad53-0632925e70f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
172.103.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:28:87:be:82:a0:a5:ef:f4:aa:88:f8:e4:05:d9:c7:8c:53:
20:bf:ee:cc:7c:b1:2b:73:4c:65:da:43:27:64:fc:a0:2e:fd:
19:62:bb:d1:31:e7:2f:63:ab:ed:c4:17:6e:63:c9:86:a1:17:
4d:38:87:42:e7:76:a5:c8:cd:64:84:25:1b:c3:45:02:3e:24:
27:bb:72:d4:87:31:db:57:95:bf:dd:58:4c:81:3b:58:fa:f3:
cf:e4:11:5c:4e:e6:0d:c6:75:90:6d:2f:59:eb:5e:0d:b7:c8:
75:7f:5e:ef:f3:cf:c5:fd:02:83:83:50:33:2c:65:4b:ca:b6:
1d:cd:66:33:10:af:73:b9:4a:48:f2:0c:9d:fe:40:56:12:33:
8c:e5:a1:c8:7d:01:46:3f:0a:0a:1b:71:e7:71:a0:e5:e4:68:
bd:e3:01:1e:a4:58:72:a1:66:f3:4c:2f:4b:9e:e4:c1:eb:e9:
f0:1d:ab:00:6f:c2:da:23:f8:80:61:15:fb:39:6c:6f:40:69:
b6:66:1f:1f:c8:f9:b3:a5:1f:db:79:e2:ad:85:f3:28:fc:fc:
73:4f:1d:fc:f8:0f:95:a5:f0:9a:6d:1f:83:0a:29:17:fd:b1:
a9:d9:8f:3b:42:7d:75:05:2b:c2:8b:ac:8a:89:d4:00:02:11:
0c:a7:37:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:53 2025 by rpki-client