Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80026075-8029-371f-abb5-6d61fe892890.roa
File: 80026075-8029-371f-abb5-6d61fe892890.roa (raw, json)
Hash identifier: MTDsoT80d+JJUKH5EubxKD+6iFXLblireLLlVDVDP9w=
Subject key identifier: 78:13:06:7A:6C:BB:54:C7:3B:CB:18:40:C8:B4:14:F6:99:0F:38:9C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584013B447292E3FFA62E558DD10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80026075-8029-371f-abb5-6d61fe892890.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 207.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:b4:47:29:2e:3f:fa:62:e5:58:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=ba2f9be9-6b5b-43b8-b846-59644b477e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:25:b2:dd:e4:e4:34:93:47:01:79:ee:fa:
96:c6:0b:a1:fe:7f:88:f2:83:95:c0:17:c6:c3:35:
b3:6a:d1:9c:3c:00:75:76:b5:33:db:3f:fc:16:2b:
59:29:ad:f8:d4:e2:7f:9e:99:18:76:fd:27:8f:35:
3a:61:c7:82:b2:f3:5f:5b:d7:c6:32:c6:03:e1:8e:
58:ae:78:a7:f8:89:d2:5f:9e:22:a7:7b:b6:78:3b:
85:9c:e5:1f:9e:54:02:19:92:d1:83:b8:a4:2b:ca:
49:6e:af:28:50:2b:ad:56:b6:97:a7:da:4d:55:ce:
1c:de:d9:81:e5:03:af:5a:67:98:7e:81:fb:fc:39:
ab:5a:ce:43:98:42:a1:da:ce:28:42:e7:67:23:10:
03:a6:e9:ed:0d:f7:10:fe:45:19:26:fc:7d:ab:d0:
2f:5d:34:c0:bb:f7:c5:c4:ae:97:3c:56:18:cb:90:
2b:31:ef:34:a4:c2:62:ed:c0:1c:db:d0:86:b1:fa:
00:3a:9a:b7:42:d5:a5:2d:bc:ee:0a:e3:ea:2e:21:
c9:aa:d5:f6:b2:f3:8f:18:2e:06:b5:59:9a:1b:12:
3d:64:a7:f7:f2:31:9e:79:92:56:6b:17:a7:71:e1:
d2:47:96:72:30:fb:02:bd:8c:64:31:f9:9f:51:e9:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:13:06:7A:6C:BB:54:C7:3B:CB:18:40:C8:B4:14:F6:99:0F:38:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80026075-8029-371f-abb5-6d61fe892890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7a:1a:bd:77:26:e8:f8:3d:96:7b:13:bd:b7:9a:c9:93:2a:
aa:1a:56:4a:6b:3e:1b:fb:78:91:78:8e:83:d9:11:12:fe:13:
12:09:94:c3:4b:8a:f7:64:7c:b1:cc:11:30:31:13:dc:02:ac:
07:ca:fc:08:33:63:44:02:8f:96:64:5d:92:84:35:42:ed:bf:
8b:3f:8a:c6:ba:f0:86:3a:79:97:b7:2d:3e:96:b6:c5:fb:aa:
5c:7a:b6:03:01:19:6a:a5:0f:b6:79:23:26:8e:7e:a1:2d:86:
57:d3:52:c6:16:70:fc:dc:63:38:f8:f2:50:2a:8c:67:83:de:
0b:0c:de:57:95:e4:d5:97:92:ec:04:e2:b0:14:4c:6d:61:52:
80:7d:a9:8c:29:99:41:b1:6e:0c:4d:00:4a:cc:e9:a0:4a:f0:
b3:1d:af:02:83:ef:07:1a:9b:33:00:65:74:60:a4:a6:98:34:
78:4d:5f:4d:64:73:a7:89:fc:61:39:37:0c:db:bc:46:98:14:
8c:ee:d8:07:eb:4b:25:41:69:ea:70:cf:9d:03:6b:9f:f2:f3:
26:b7:d3:ed:54:03:9d:56:81:ef:c6:db:2a:2b:a2:17:07:4a:
a4:bc:75:2e:50:a8:64:51:9d:d6:6c:b4:43:ef:af:a2:91:cd:
ca:bc:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:39 2025 by rpki-client