Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2f5b40d-62d9-3192-9dbd-ebbbdf81239a.roa
File: b2f5b40d-62d9-3192-9dbd-ebbbdf81239a.roa (raw, json)
Hash identifier: /5ulDEp1ZxpDlHQOjcWa9aB3Cpd/P6do9wGAZtyRrCw=
Subject key identifier: B0:0A:FE:B1:59:52:AE:04:49:AB:E2:27:B5:5E:CC:5E:7A:09:24:6D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403559BB4684FB28E8AA4CA540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2f5b40d-62d9-3192-9dbd-ebbbdf81239a.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 207.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:59:bb:46:84:fb:28:e8:aa:4c:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=7a352cf7-096a-48dd-a849-7dcc40dcfb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3d:25:70:b5:01:27:7d:97:c7:5e:71:e0:21:
e5:1f:97:e7:b1:30:ef:81:84:15:67:3e:7c:cc:2a:
01:e1:fe:d1:18:1e:b9:6e:f8:51:21:3b:58:ff:6d:
55:16:53:19:f1:08:8c:30:f0:f4:c4:2c:bd:40:d2:
6a:8e:3d:75:4c:bd:ec:26:07:98:6a:84:b1:ab:3f:
4c:ec:d0:98:55:20:87:c2:c8:d0:c9:2d:4d:6a:59:
f4:d9:49:44:1c:51:ed:e5:d4:b9:df:73:f8:a2:3b:
5b:21:f3:8e:d0:f6:6a:f8:06:81:47:4e:45:6e:06:
ec:5f:90:61:68:a5:28:32:73:ac:14:0b:f0:bf:49:
d3:c0:a3:dc:a7:f1:11:68:ff:3f:b2:1e:89:85:bf:
79:a9:07:c4:17:e8:bd:d9:93:25:c8:4c:2e:ba:76:
aa:11:6b:88:48:f4:76:cb:23:24:8e:88:4d:bb:d6:
26:b0:c4:c9:2a:10:75:81:84:ee:df:1c:53:8f:80:
15:b0:33:64:ba:70:0c:59:95:a5:e7:39:8a:c7:24:
52:53:ec:17:7e:b6:ca:9d:6a:56:15:47:22:46:6c:
3c:73:2e:2e:81:51:9c:84:ad:ce:1b:cd:21:15:02:
bd:a3:50:f1:e7:df:2b:48:c7:38:54:6f:45:90:9d:
4a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:FE:B1:59:52:AE:04:49:AB:E2:27:B5:5E:CC:5E:7A:09:24:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b2f5b40d-62d9-3192-9dbd-ebbbdf81239a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:48:84:40:5e:4d:78:79:dc:4c:2c:f0:3b:5c:1d:61:47:3c:
62:48:fa:65:4d:f7:39:27:12:47:ef:ed:c3:6d:d5:22:05:41:
e7:ae:e6:45:5b:63:fc:69:19:33:dc:4b:dc:e1:08:3e:a8:b6:
2a:3f:84:36:b7:9e:71:65:d1:89:ca:d8:4c:e8:a8:20:82:2c:
2e:7b:ab:f7:d6:0e:a3:1c:45:a0:92:df:45:35:f1:70:a6:7f:
72:96:13:68:30:38:62:e3:19:90:10:d9:79:e1:85:83:3b:15:
0a:a4:33:81:82:73:81:b1:26:50:bd:4d:e6:f5:b1:fb:6b:e8:
c5:a8:e0:11:c0:b8:6c:d4:37:3a:35:f3:80:94:b5:a5:3a:41:
8e:dd:23:5e:53:d6:38:77:bd:66:cc:8d:f1:a0:58:98:d6:06:
45:80:d3:44:95:8b:c4:8d:4c:63:df:6a:4f:38:34:cf:e7:21:
22:bc:cc:e9:35:f7:f7:f0:60:65:1d:ed:8f:04:34:cc:7b:81:
9a:10:b8:af:9d:7a:4e:8a:e7:dd:69:78:00:96:a9:16:48:a6:
bd:af:9f:2a:0a:1c:65:88:ea:47:ce:a0:ac:b3:92:44:cd:41:
70:b2:b9:89:1e:ce:4e:87:03:eb:98:d2:b7:89:a7:29:38:c5:
25:ad:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:52 2025 by rpki-client