Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa
File: e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa (raw, json)
Hash identifier: DPJB2PiGlAz+MxJoDEibArV16C+a38LWtdXzjgnKz8o=
Subject key identifier: 0F:13:32:C1:71:B5:04:90:3C:F5:F0:12:F1:A8:D3:45:89:5E:86:6F
Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial: 010D0C9F432858481B353193E3BC9A31BF05C2F0
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa
Signing time: Thu 05 Dec 2024 14:00:51 +0000
ROA not before: Thu 05 Dec 2024 14:00:51 +0000
ROA not after: Wed 05 Mar 2025 14:00:51 +0000
asID: 26383
IP address blocks: 207.90.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:35:31:93:e3:bc:9a:31:bf:05:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Validity
Not Before: Dec 5 14:00:51 2024 GMT
Not After : Mar 5 14:00:51 2025 GMT
Subject: CN=a9e582dc-c853-4174-a121-dc6c36d10997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:f8:c8:0c:a6:b5:15:09:43:24:fd:cb:dc:
f6:d1:a4:02:9c:ef:ba:d7:83:6b:14:fb:97:b3:f3:
71:b4:e8:0a:fb:3f:ba:69:09:d4:96:92:fa:61:40:
26:fe:26:fd:a9:58:0b:0e:79:46:42:bf:61:bb:51:
42:5e:39:7d:28:cd:b7:74:91:21:f1:b2:21:4e:14:
35:70:06:51:6d:bc:ff:58:5b:7b:76:3d:ac:79:e0:
b6:52:0c:29:0a:c5:f7:08:84:8c:3f:86:9b:eb:49:
e0:f8:21:22:b4:e1:c7:03:82:10:63:7a:00:4c:16:
77:7c:4d:56:bc:9b:be:7a:d5:1b:57:a6:47:6d:0d:
f5:68:a4:69:6d:1e:e6:08:13:5f:b4:85:79:47:6c:
ae:82:33:3b:12:06:d7:1c:a8:71:d7:e0:4d:51:82:
b6:66:8b:8d:81:e6:86:f1:0e:b2:03:53:e3:0a:1f:
68:dd:fb:43:7c:e6:62:7c:f6:4c:76:4c:94:4d:a0:
49:99:ef:34:ff:7f:2d:3e:68:6f:3e:b9:49:10:47:
a3:d3:87:4e:da:88:e0:fe:9a:cb:a8:8f:c2:23:0e:
21:b2:8f:fc:c4:e1:fd:5b:27:4e:5b:fe:03:64:93:
5f:39:2b:dc:50:cb:13:1c:42:93:1c:db:f8:13:ef:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:13:32:C1:71:B5:04:90:3C:F5:F0:12:F1:A8:D3:45:89:5E:86:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
X509v3 Authority Key Identifier:
keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
sbgp-ipAddrBlock: critical
IPv4:
207.90.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:d8:e4:41:d0:be:b4:6e:35:1e:4f:37:db:88:1e:2e:79:70:
41:c1:e9:18:bf:a9:8d:ef:78:26:d7:1d:a3:b5:09:44:93:88:
07:15:8a:12:80:15:63:8d:3f:f4:24:15:75:b1:a0:d3:8c:a5:
bc:99:dd:b5:cf:fd:63:2d:c1:ba:30:1d:b9:db:b3:f1:fd:5e:
15:b8:e4:38:45:8b:53:ad:82:22:7b:88:c5:fb:9a:9e:c3:0d:
c8:c5:ae:36:80:37:d3:3c:69:52:9b:8f:77:10:e1:ba:5a:53:
7a:22:44:6f:da:10:9b:fd:f8:bf:57:70:de:26:d2:7c:53:cf:
00:46:4f:85:de:fd:3a:d1:e8:ce:2f:13:5f:5e:0e:15:55:00:
8a:81:7d:78:15:6c:ad:b5:32:4e:18:e3:99:8f:82:ed:df:c2:
a7:2f:02:cb:b8:df:86:c1:1c:6f:72:af:ea:50:a1:8c:ea:54:
63:2d:a9:ea:82:06:7d:8e:1f:ba:52:c2:0d:25:a3:1f:e6:f9:
8d:c9:38:5c:20:83:02:e8:44:25:93:3f:1f:76:dd:8c:0f:bb:
98:a7:03:79:ad:93:20:7b:d6:e8:b3:13:ba:20:dd:51:97:6f:
bc:d0:69:ce:cd:23:ea:5b:ff:4d:1f:8c:8f:df:68:8e:90:c5:
b3:5d:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:42:10 2025 by rpki-client