Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3ccffb7-ca28-3eb3-9267-15dfd70bba51.roa
File: b3ccffb7-ca28-3eb3-9267-15dfd70bba51.roa (raw, json)
Hash identifier: pzJSD/ZEp6PMSyFE8ry22Rua3tnFAe+ZYN3XncJgpNE=
Subject key identifier: CB:CB:5A:89:97:2F:92:F8:F6:DF:A9:11:E5:8B:D2:6A:41:70:70:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400E08A642661E0A0995D97E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3ccffb7-ca28-3eb3-9267-15dfd70bba51.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 207.9.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0e:08:a6:42:66:1e:0a:09:95:d9:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=e0e504ac-8025-4c7c-8b18-451d2d7c5b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:b4:27:6d:ad:44:3f:af:67:a5:be:bb:af:
a4:a8:d0:62:51:31:19:d4:06:05:0a:ac:94:6b:6c:
71:36:63:84:7b:0d:08:17:57:d4:f2:1b:8c:79:0d:
14:b9:74:36:ac:96:ab:06:41:54:65:4a:8b:35:9a:
7f:23:3d:43:bb:42:41:a6:26:7a:fb:6f:c8:24:17:
44:09:44:56:48:6a:de:66:5b:1f:54:c0:44:3f:d6:
ee:37:2e:4c:38:74:79:d2:ef:ac:83:ea:4c:02:d7:
65:a6:20:29:f9:81:bf:7b:8b:8f:a4:75:df:98:0c:
45:bb:22:90:42:2e:ff:26:45:4e:79:28:ff:ba:bf:
ef:b9:50:d3:b5:36:c9:0d:0d:eb:ff:47:97:ee:a1:
6e:ca:31:4f:de:af:1c:b3:6a:da:ca:48:e8:96:97:
ac:a6:27:db:f6:21:74:c2:39:0c:09:5d:bf:d3:03:
e6:39:7a:67:c8:f8:0d:25:a5:35:aa:30:95:c2:70:
ed:0d:a0:32:42:a5:8f:00:dd:c4:c9:a5:0d:03:0b:
fb:b5:0b:6c:e5:f2:b3:1a:24:84:03:ca:18:aa:08:
cc:d6:b4:8b:85:a8:d1:d8:0e:4c:00:5b:cf:90:95:
c0:b0:e1:c2:3b:a5:72:d3:83:94:b8:f5:fd:ce:35:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CB:5A:89:97:2F:92:F8:F6:DF:A9:11:E5:8B:D2:6A:41:70:70:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b3ccffb7-ca28-3eb3-9267-15dfd70bba51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.9.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b0:cf:80:81:51:44:c0:2a:35:70:c4:d4:59:13:c6:1f:bd:
e8:26:bb:37:e4:b0:de:77:67:e2:cc:33:e3:9d:cb:fc:c7:17:
92:c5:c1:1b:5b:4f:b1:ae:4a:b0:40:e0:a3:dc:ae:83:39:62:
24:68:b9:3d:61:49:15:d0:19:fa:da:c3:81:73:0c:ac:28:1a:
bd:bf:ab:51:6e:d9:0d:ac:c8:86:e3:d9:2b:f2:c7:34:f7:fc:
5b:7d:9c:2e:60:95:c3:6a:a2:06:e7:0b:4f:13:38:5f:a0:a6:
e1:04:fc:a3:1e:3f:72:6a:fb:7c:1c:70:fa:88:80:ab:03:81:
89:4a:30:94:37:c1:e8:ae:b5:77:ea:c7:0e:b4:0f:0c:f2:16:
1b:23:67:dd:98:e4:66:70:23:e6:50:c7:b0:0e:54:6d:e2:c4:
ce:92:05:77:67:16:ef:e0:64:52:4b:10:10:07:21:d2:b4:a1:
be:f1:32:a7:22:18:24:1b:dc:09:af:56:66:2f:e2:bc:81:15:
1b:b8:5d:a6:e2:2c:3a:d2:4d:38:e8:17:fc:9c:3b:fb:b6:24:
3d:22:a3:07:66:77:45:f1:f5:ee:2d:ca:60:01:a1:5f:97:4f:
89:f3:b1:86:90:e4:80:f1:d8:af:c9:06:9b:5c:d2:26:82:3c:
10:81:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:00:56 2025 by rpki-client