Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28495a72-f3a4-3fd9-b598-e51f35200b8f.roa
File: 28495a72-f3a4-3fd9-b598-e51f35200b8f.roa (raw, json)
Hash identifier: OHcNIffwwzDeKsh87TACYNinJdZqoulNia1wfkvIha4=
Subject key identifier: 59:1C:7A:3E:71:87:30:A8:83:66:BA:CC:E3:CA:83:41:4F:D4:0A:4D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5996BF52D115577E77290880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28495a72-f3a4-3fd9-b598-e51f35200b8f.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:96:bf:52:d1:15:57:7e:77:29:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=2784c0a9-8239-41cf-b5f3-8bcde3a07627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:7e:7b:46:ed:5a:a4:a9:d7:b5:b5:9c:0e:
45:d9:1c:66:71:24:eb:e1:d2:e3:78:03:c6:5e:3d:
5e:e2:9f:28:f3:eb:7b:23:87:ee:f7:53:b6:26:0f:
98:70:2d:d3:d9:fe:1b:3c:7f:70:f9:57:fb:7a:25:
8d:ce:e1:8b:0c:0c:01:62:26:61:41:f3:aa:87:c6:
67:1f:64:dd:f1:fb:35:23:fb:02:bd:72:6e:63:91:
99:d4:c0:1c:45:3f:c0:87:f5:43:cd:a8:4c:ab:54:
02:f2:91:a0:45:ff:46:b1:9f:5f:32:c8:e9:6c:b3:
63:a8:82:76:00:55:cf:20:94:40:5b:43:da:0c:20:
5b:3f:f0:5a:20:39:30:96:63:01:c3:23:ef:44:0a:
7b:18:e7:65:58:2a:f3:f3:9c:74:9b:41:d6:75:fc:
3d:eb:50:31:09:4f:44:51:7a:81:b2:6d:97:c0:0a:
60:c6:40:fa:d7:ff:e2:04:a8:ff:f2:b1:a3:99:12:
ef:4e:90:cf:82:e9:21:4a:35:b7:df:75:a0:6c:fe:
56:fe:38:98:85:c6:3a:ce:98:8f:d3:aa:84:65:e9:
7b:36:ca:8b:f0:85:a8:f0:c8:75:46:21:b6:bd:7a:
ac:6d:5d:bf:84:17:a8:2b:b0:e2:04:5a:bd:07:68:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:7A:3E:71:87:30:A8:83:66:BA:CC:E3:CA:83:41:4F:D4:0A:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/28495a72-f3a4-3fd9-b598-e51f35200b8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:db:dc:c9:99:fa:2c:eb:4a:8e:18:91:b0:a9:5c:fb:a5:6d:
47:26:2b:8e:13:58:32:73:27:ec:95:bf:41:4e:b5:23:0e:ca:
e6:c8:43:8d:30:6b:96:dd:e2:8b:32:4f:e2:d0:e2:59:13:20:
4a:0b:f1:3e:68:89:9c:e8:f6:f9:fa:3f:15:c3:bf:58:08:02:
e3:7b:38:6e:18:d2:eb:40:42:6f:d5:96:6e:66:ea:9f:2e:bf:
a2:7d:64:24:96:39:c7:b5:33:90:d9:fb:d3:ad:fe:19:38:a5:
33:24:bc:65:06:e2:5a:dc:80:96:ba:84:c9:82:81:50:45:ae:
a4:4f:95:c4:d1:45:7f:9d:f8:60:6b:8c:21:48:9f:5e:c5:ac:
d4:f5:74:41:38:5a:da:98:c0:70:7c:cd:d3:c4:8d:86:4f:dc:
e5:c9:7b:a8:5a:78:45:74:8c:73:78:8a:91:e3:1b:82:d6:dd:
55:0e:f6:57:c0:14:25:fb:45:11:fa:ba:93:59:aa:22:ae:da:
b6:48:86:7a:12:7a:d1:6e:59:05:fc:ea:4f:1c:34:1f:6b:c1:
09:b3:b5:9d:85:e0:6f:41:5f:2c:c4:8f:70:8f:82:80:58:46:
0a:56:45:64:54:71:83:0e:12:d9:08:26:6e:a2:f0:55:b0:86:
c3:39:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:49 2025 by rpki-client