Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0048d5dc-42e3-316d-a9fe-d8bf1db4b889.roa
File: 0048d5dc-42e3-316d-a9fe-d8bf1db4b889.roa (raw, json)
Hash identifier: l+x7iD+rqLFuTPp6HMaI545RZASDPu7Q47UGiXd46jw=
Subject key identifier: 67:5B:99:CB:CE:55:91:86:D1:5E:FA:0E:2E:ED:0A:71:AF:4C:BB:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406B4429A998FB83F881186B40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0048d5dc-42e3-316d-a9fe-d8bf1db4b889.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:44:29:a9:98:fb:83:f8:81:18:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=cbcc8c26-89e9-4436-b8d2-af206ca8a27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:c3:98:cf:35:6e:1a:d7:ad:ac:05:0b:7d:
fb:62:33:31:48:b6:cd:c7:ee:fa:7d:9c:c0:b6:29:
d1:d3:a7:a5:be:b4:f1:67:c5:71:ec:62:68:73:6b:
d0:ec:94:b8:0f:1f:e5:83:75:01:3f:9e:16:90:40:
f3:c0:1c:18:54:15:ce:60:32:2f:14:58:db:60:8c:
16:dd:b8:eb:0f:63:de:92:34:54:87:56:96:3d:93:
44:e3:c3:30:a8:10:7f:3e:13:92:8e:e4:5a:39:cd:
5d:99:24:f5:90:c5:08:a7:4f:4e:09:d0:9f:f3:e9:
c5:b9:95:27:fa:cb:d7:95:4e:50:a5:ec:aa:29:aa:
17:8b:cf:54:3f:f8:de:7e:3d:f2:8c:27:8b:1d:b3:
a4:b2:5d:fe:c8:9a:30:30:14:45:31:be:16:70:35:
2e:10:ef:43:31:85:77:de:da:f9:91:d8:41:6c:70:
43:9f:94:a4:df:14:a9:c6:2c:31:50:d9:99:29:13:
c9:3a:19:3c:eb:e4:60:02:b4:8a:17:4f:e3:10:dc:
4a:1f:29:e7:b6:b2:db:98:b7:7f:75:8d:e5:5a:53:
b4:85:8a:1e:ad:ed:78:50:a3:41:77:66:45:65:95:
4d:ef:9d:57:f7:d6:b7:50:2d:11:e3:c8:a5:30:18:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:99:CB:CE:55:91:86:D1:5E:FA:0E:2E:ED:0A:71:AF:4C:BB:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0048d5dc-42e3-316d-a9fe-d8bf1db4b889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:82:39:96:76:c2:5d:56:e1:4f:82:cc:5f:81:1f:9a:06:54:
21:a7:81:2c:f1:ec:17:e2:69:fd:82:f4:be:a5:ff:02:b1:e3:
30:5c:39:a8:d8:cf:cb:a7:c0:20:f6:7d:a7:45:ca:ae:8b:1a:
d3:a8:69:09:8b:c5:03:11:f1:10:af:57:82:fb:b9:ef:95:8f:
96:d3:c7:dd:f3:b5:f0:1c:6a:0d:70:e6:31:22:48:c6:8a:ca:
e7:e1:ad:25:e7:2d:45:75:77:cd:2e:07:4d:14:7c:ba:e8:c8:
fe:fc:9b:bd:88:97:00:1d:f3:00:ad:ce:96:7f:da:61:79:99:
c7:8b:92:f2:76:02:fc:eb:27:53:58:36:16:c6:57:4b:bb:1e:
ca:33:37:4b:24:83:29:74:c9:1a:ea:5c:f6:fa:c3:be:e5:f1:
b2:57:86:22:c3:88:d6:50:9a:95:d6:81:b1:bf:38:f8:5c:f1:
6a:5c:a9:f2:f1:48:5c:2a:d1:cb:7c:fd:0c:e9:3b:bb:e1:f0:
56:ea:4b:e2:8b:46:7c:3b:ad:55:f6:1a:46:27:f9:09:2c:04:
0f:32:a2:1c:52:45:4c:3a:c7:ff:c5:c0:ca:22:ac:e8:7f:20:
fa:26:18:35:c8:61:2d:7d:22:35:2e:c8:a9:db:dc:db:a1:3d:
5a:11:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:11 2025 by rpki-client