Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34a5b6df-c874-3f09-afeb-3b0ce34ea124.roa
File: 34a5b6df-c874-3f09-afeb-3b0ce34ea124.roa (raw, json)
Hash identifier: Xa6s4VYsZTRJ6T6on9Fw623fxdg94n23FRW9wxYzBKE=
Subject key identifier: 40:FD:60:64:E9:C2:A1:EB:9C:28:E6:B8:A1:6F:81:28:3D:5D:D4:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F1170F32F4EAC4F97D7C37780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34a5b6df-c874-3f09-afeb-3b0ce34ea124.roa
Signing time: Sun 28 Aug 2022 12:00:00 +0000
ROA not before: Sun 28 Aug 2022 12:00:00 +0000
ROA not after: Mon 03 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 207.127.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:11:70:f3:2f:4e:ac:4f:97:d7:c3:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 28 12:00:00 2022 GMT
Not After : Oct 3 04:00:00 2022 GMT
Subject: CN=11ef5ad7-6245-48d4-8485-c0fc26014312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:72:4d:0d:cc:15:8d:cc:5a:60:5e:ed:0e:
09:6b:f9:a9:fc:84:9b:0e:46:92:12:e1:20:c3:c5:
57:54:9a:8a:c1:0d:f6:42:e8:be:6c:87:93:bf:02:
8a:aa:e1:87:f8:03:40:4f:ff:b0:70:68:ed:94:c3:
1e:a6:52:1d:0a:10:b7:2c:da:c8:75:a1:27:ec:74:
1e:c5:4d:19:d5:90:ee:83:98:a2:59:7f:57:b1:21:
a0:ac:43:c9:84:3b:4a:b7:57:54:dd:5d:66:ea:23:
6a:58:77:09:f1:1f:31:1b:d9:9d:3f:0c:29:36:2c:
92:ce:ba:cd:f3:81:11:94:da:b2:48:cb:02:7d:2c:
61:8d:ec:15:76:f9:3d:85:8e:43:3a:93:35:7b:9b:
0c:4a:ed:a2:55:1b:0c:a3:a9:1a:0d:57:86:7a:d7:
1e:08:55:1e:da:59:f4:f7:f9:da:2e:fc:b9:8b:82:
21:e2:1e:c6:ad:5e:23:1b:26:25:ac:80:0a:8a:f5:
c4:09:fb:5b:d5:3f:53:c7:1d:81:29:bd:6e:03:24:
4e:23:ab:52:c8:bd:44:b2:83:b9:87:4e:f0:fa:ee:
8b:07:42:ec:0a:90:15:86:51:12:ab:fb:73:8c:16:
7a:bc:1e:ce:52:60:01:ad:41:cf:26:60:24:51:6d:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FD:60:64:E9:C2:A1:EB:9C:28:E6:B8:A1:6F:81:28:3D:5D:D4:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34a5b6df-c874-3f09-afeb-3b0ce34ea124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.127.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:3a:20:05:8a:26:0e:0d:89:51:5b:3b:80:b6:4f:ef:99:35:
87:6f:b4:49:88:8e:dd:e9:72:d1:99:3a:22:62:05:37:f4:2e:
f1:33:72:f4:71:f5:be:e4:6b:9e:ad:b3:83:df:5d:f8:16:88:
51:d7:22:70:4c:d3:0b:6c:d1:bd:3b:75:9d:1f:47:e2:4c:db:
da:d0:c4:31:0f:55:d7:55:e9:8b:d2:61:7f:c8:2c:eb:82:49:
92:35:56:14:45:fb:66:d4:98:2b:c5:3f:8f:33:80:48:cd:ac:
2e:ca:fe:ba:c8:f5:c2:af:a2:db:ef:2c:f0:39:8e:c4:e7:33:
56:9b:28:a5:ca:44:f5:c3:62:02:06:d1:80:5f:c8:55:95:fe:
35:42:ca:f2:50:e1:20:b5:af:be:cd:f4:29:fc:72:b5:aa:1d:
f9:a0:70:07:d0:9e:ef:c2:57:a8:3b:e7:c6:7a:26:62:e7:ff:
9d:4a:b7:71:7d:f0:2b:d3:00:23:69:3e:03:6a:41:4a:ce:ac:
ba:c0:8e:13:b3:49:ef:76:1d:08:b6:9c:9a:f3:6e:47:e4:61:
5e:ce:97:b1:e3:bc:e6:fc:2f:48:67:d4:6e:06:2e:81:fe:d7:
22:d9:ad:4b:cc:6c:5c:71:72:53:5b:38:c4:36:ed:f0:1c:db:
26:60:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:54 2025 by rpki-client