Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df97fe10-13b2-381e-aa33-b0ad891017cc.roa
File: df97fe10-13b2-381e-aa33-b0ad891017cc.roa (raw, json)
Hash identifier: xIPJg8FAzp9UN2/2Lwjk9Tc+BsXv4z1lfR2fiVd5iDA=
Subject key identifier: A3:8A:B6:B2:B8:F7:B3:79:71:AD:65:65:F4:E2:3D:77:20:60:D6:68
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584061DF8D8BBCA53D3E331EDCA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df97fe10-13b2-381e-aa33-b0ad891017cc.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 207.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:61:df:8d:8b:bc:a5:3d:3e:33:1e:dc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=2b58f3fa-d7ca-493d-a5d5-eebc4873be45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:af:13:d4:93:64:c6:17:34:88:fc:fb:90:
63:05:70:00:e3:f6:6a:dc:44:7e:f5:2b:9a:fd:1c:
dc:36:1d:91:ed:9c:e1:b2:0b:b9:de:45:dc:36:88:
0a:5b:67:ef:8c:12:94:8a:6d:97:49:47:81:6a:01:
d3:9f:f2:26:5f:69:f8:2d:a7:ca:a5:c2:6b:ad:80:
8e:20:0a:a8:e8:86:5b:6d:03:c8:95:a2:d4:35:63:
15:93:6b:0f:5a:7c:85:00:89:7e:8e:34:2e:2d:93:
c1:4d:5e:99:70:be:1b:3a:37:8d:c3:42:a2:b8:1b:
44:22:1b:a0:35:38:d8:58:ac:cb:88:67:8f:df:a6:
ff:a2:01:71:b3:b1:b4:39:fc:d4:79:c4:08:fa:2e:
b5:82:76:fe:d7:8a:eb:30:7d:93:48:b8:17:63:2d:
00:cc:12:7f:11:69:6b:bb:49:1c:67:97:80:7d:48:
63:51:1e:6a:17:d2:36:f9:e2:8f:3e:31:16:03:d3:
92:91:24:25:60:8e:c3:3f:f8:7c:b7:6b:91:34:60:
24:1c:43:c3:aa:b2:8b:0b:26:04:c2:56:97:3c:dd:
7f:a9:d1:31:1a:e7:8b:23:3e:bb:26:d5:9d:67:83:
01:89:70:7c:26:45:49:f9:91:91:b2:78:84:66:1d:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:B6:B2:B8:F7:B3:79:71:AD:65:65:F4:E2:3D:77:20:60:D6:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df97fe10-13b2-381e-aa33-b0ad891017cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:97:e9:2b:76:4a:d5:f3:96:e2:ee:87:65:fc:b7:1d:b9:c0:
e0:72:48:62:57:b4:51:2a:65:a4:b9:84:0d:4f:ea:b6:1e:2a:
1b:47:8a:ca:89:fa:10:f4:ef:b4:31:5b:6f:76:eb:5d:34:9b:
42:fc:cc:a7:3c:2b:b7:02:09:c1:16:17:f3:56:12:37:2e:e8:
31:09:d5:f7:f3:42:57:3d:df:2b:7b:0a:01:e9:69:3e:29:02:
5c:8b:d4:1f:e3:1a:05:bb:41:f1:7e:d6:af:96:02:9c:de:73:
ee:78:eb:2d:ea:59:0f:e3:23:03:46:ee:e1:88:95:a6:47:96:
62:0d:a8:e6:0b:72:44:13:15:35:17:17:39:55:09:10:c1:03:
92:21:d2:67:32:97:18:58:e0:63:33:46:e0:c5:5b:3f:b7:fa:
ac:76:76:42:4f:85:c6:0a:38:b5:6d:1b:72:a7:ba:cb:1d:89:
7e:39:95:27:c1:cb:be:32:c5:fd:cf:9a:1c:1e:ab:64:88:a4:
a3:9d:da:17:fa:41:0a:94:95:3b:82:e9:e9:a9:2f:90:a3:4d:
cf:ec:93:87:27:7e:3d:b9:98:85:be:47:e2:ff:97:f0:7e:3f:
2d:3b:a3:63:8f:cc:d4:5e:b3:5b:c6:d8:1b:a4:51:20:ec:4d:
ec:5c:3f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:08 2025 by rpki-client