Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5aa39d3-08c6-3438-b106-456600d5428f.roa
File: f5aa39d3-08c6-3438-b106-456600d5428f.roa (raw, json)
Hash identifier: a4n1/2JSWdhlxn3XEZenIat8+XI8P5cnvkNqE1CkzC8=
Subject key identifier: 57:43:E7:0F:53:E8:0B:C0:B1:2B:C5:74:93:65:27:64:67:1A:DD:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC56B37480CBECF2A4B88F500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5aa39d3-08c6-3438-b106-456600d5428f.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 207.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:6b:37:48:0c:be:cf:2a:4b:88:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=a082efba-1c22-404a-a83d-2d1616f297a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:8b:cb:ab:78:f7:42:c5:43:1e:cb:08:2a:
65:d1:40:f8:01:bc:36:bd:4b:db:3a:ae:ca:93:17:
c9:d4:78:18:88:5c:34:66:ef:e9:bf:b6:8a:69:fe:
c9:cc:15:04:99:2b:bf:6b:99:c8:13:b2:f9:13:f8:
d2:44:5e:95:a4:37:bd:ab:4c:c8:d1:7b:13:57:4b:
c4:a7:53:1a:fe:f9:bb:ac:66:25:54:3d:88:31:3c:
b2:b7:91:ad:d8:a0:2a:37:10:af:57:14:84:24:67:
fd:46:2e:a2:b0:44:d3:e9:0f:e7:1e:ec:4a:67:d3:
8f:c8:0a:cb:d2:c4:1f:20:39:e1:f4:fe:85:43:5a:
e1:23:d2:f7:97:76:6c:b7:3f:e8:19:14:91:89:87:
32:68:e9:60:6b:54:b4:8c:98:b6:43:d7:dd:7a:82:
2b:1b:01:28:90:29:2c:80:6c:25:7e:8d:45:0a:70:
99:fb:2d:cc:16:3c:01:6c:0a:62:34:82:93:7c:bf:
cf:df:be:df:18:66:f8:ae:fb:86:5b:d0:66:f8:fb:
00:65:db:0e:97:da:ec:ef:a9:af:c6:e8:2c:0c:56:
3c:aa:3e:fc:04:fe:b1:9f:91:0f:c1:e7:fd:e9:47:
2d:c7:c2:8d:a5:64:38:98:ba:7d:29:dd:fb:41:d0:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:E7:0F:53:E8:0B:C0:B1:2B:C5:74:93:65:27:64:67:1A:DD:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f5aa39d3-08c6-3438-b106-456600d5428f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:9b:85:ff:26:cc:d2:4b:67:22:14:92:95:80:36:a1:dc:40:
8b:9a:0f:bf:ba:e2:a7:14:24:00:34:2d:f3:3b:a2:fd:42:b7:
81:77:0f:f0:4d:6c:d1:3f:3d:43:03:27:50:31:4e:88:78:2f:
30:f3:45:c7:7b:c5:7c:e0:88:53:63:3b:f3:7c:41:a9:af:94:
ee:ed:61:98:5f:df:72:e2:82:46:e8:42:1c:6b:42:f5:0d:41:
9a:59:a1:b5:26:84:a2:6c:69:d3:97:5e:a3:ce:95:0d:9f:be:
03:9a:2d:b8:fa:d2:cf:06:a5:38:e1:45:17:2b:75:cd:00:53:
cc:d5:14:dc:92:8f:56:6a:94:2c:c7:23:bb:5e:73:37:ab:02:
5a:d6:be:cb:64:95:ba:bf:b9:ae:a0:87:cb:7e:c3:8c:9b:c4:
d7:9b:27:ac:77:24:bf:08:0f:40:66:a2:95:dc:ec:c8:d9:bf:
b8:f7:d1:67:d5:35:d0:a7:d2:89:8e:ba:b9:4c:b3:da:d2:c4:
da:ec:28:e5:9e:c8:93:84:69:88:b4:0d:73:d1:2c:25:af:9a:
69:ba:9b:8c:b8:57:fa:a0:c6:41:47:9d:03:83:00:0a:68:2b:
ee:c4:e6:68:57:83:ea:0d:89:0b:88:3a:8a:78:c7:63:2d:21:
e0:97:57:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:05 2025 by rpki-client