Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/258832d2-8d97-3151-8b84-fd5c513522a2.roa
File: 258832d2-8d97-3151-8b84-fd5c513522a2.roa (raw, json)
Hash identifier: 0BTIJ6KWf3cA8gy3pkisMcbjEywzT+V33qXYPNrgrTg=
Subject key identifier: 1A:95:DB:73:CA:9B:AB:EA:B2:4F:F5:75:47:E8:E5:7D:9C:78:5D:3B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5996B8F179F94FD888D72A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/258832d2-8d97-3151-8b84-fd5c513522a2.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:96:b8:f1:79:f9:4f:d8:88:d7:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=1d4e683f-0ba1-4f30-bd4c-a4d0f23848d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:dc:37:f1:ee:df:73:0c:2f:bf:54:88:11:
25:1d:ce:bf:a1:23:7f:e3:ed:0d:c9:4b:1e:a1:aa:
d0:7a:76:ce:fa:c1:3d:df:1f:64:f0:57:89:fd:9b:
40:aa:86:bb:fc:72:6f:1e:1e:17:0a:bc:da:c3:00:
05:1d:24:4b:10:27:43:db:cf:a7:5c:43:4f:56:ea:
b4:34:98:e1:53:41:b4:f4:8d:69:ad:72:bc:38:0a:
8c:c4:84:75:e3:e3:68:71:22:04:b9:2b:2e:96:b1:
be:63:e3:fc:1a:82:8c:aa:12:d7:76:1a:aa:64:56:
e1:49:00:21:2c:ee:2a:48:e7:58:73:69:98:0d:9b:
1b:33:f1:96:da:34:20:a1:19:f2:80:d4:a8:b5:39:
f6:71:cb:1e:81:7d:33:b5:77:a1:84:26:28:66:24:
d9:b4:e3:1e:ec:2d:c6:62:74:ef:2a:c7:8f:f5:8f:
0c:3f:17:39:ad:78:8b:69:64:4b:a0:38:bb:a1:7d:
91:3d:5f:ae:2f:c6:52:f4:c5:32:67:82:c5:38:95:
07:48:83:db:21:0b:0f:96:44:0b:e7:53:a8:8e:ae:
f2:ae:32:ee:5d:a3:fe:8f:51:26:05:d3:8d:2f:c1:
5c:c0:43:ef:e9:75:64:f7:6f:a3:c9:b4:32:f6:ff:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:95:DB:73:CA:9B:AB:EA:B2:4F:F5:75:47:E8:E5:7D:9C:78:5D:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/258832d2-8d97-3151-8b84-fd5c513522a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:55:d6:30:a7:04:34:06:8c:1e:c4:71:92:7b:fb:0f:7f:b3:
d4:7a:91:6e:e6:00:c2:12:5a:bd:f3:34:70:9f:ee:98:3f:0d:
64:b0:30:7c:c6:9f:e4:df:b6:be:7e:d2:25:03:78:91:01:61:
9c:ad:33:46:77:b7:3e:8d:e6:23:7d:69:b8:e6:d7:5a:ce:aa:
8c:ce:2c:b3:c8:18:ef:77:d0:6c:fd:24:28:d2:9e:b4:c2:01:
d7:70:83:c3:c8:04:96:9c:fe:5a:f5:13:2d:6d:9f:9f:7f:23:
b6:c5:ee:0c:2f:5e:85:3f:04:f8:11:9b:6f:fe:2e:ab:de:65:
62:7f:99:b5:a0:5f:c3:14:cc:d5:dc:ac:44:25:4f:ef:61:10:
dd:f3:fa:e6:e4:47:c9:79:1a:ca:0f:17:90:78:7b:1e:5e:9a:
70:2c:f4:ff:8d:48:ce:1d:bc:47:de:b6:d2:0d:65:34:29:2d:
e8:8d:d3:4f:eb:c8:07:4e:c4:f8:b1:4b:79:9f:f3:d7:d0:66:
4f:44:c4:61:6b:73:d2:ca:de:4c:e3:b5:3a:48:a4:68:78:b5:
d4:a2:e9:d5:4f:26:ca:12:e8:2a:79:8d:53:85:70:e5:61:10:
b3:6a:6d:ef:9f:fe:bc:83:87:f0:b0:9b:4b:85:b2:a2:ba:04:
2d:10:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:58 2025 by rpki-client