Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34cdd6ac-b1df-3f12-ad88-6b8ceaf593dc.roa
File: 34cdd6ac-b1df-3f12-ad88-6b8ceaf593dc.roa (raw, json)
Hash identifier: 0W97RDUufTQpx2YkpF1VgLEiORJ8bkF0ewsix+7LJl8=
Subject key identifier: 88:29:F8:A9:61:F4:13:86:0C:5F:50:F3:0F:00:30:D3:36:96:14:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81BAA861797BC5ADFA6B1B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34cdd6ac-b1df-3f12-ad88-6b8ceaf593dc.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:ba:a8:61:79:7b:c5:ad:fa:6b:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=d2885c64-11f4-42e3-a716-ad5373d87ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:cb:fe:a5:b3:5c:f6:e1:fc:bf:bf:bb:bb:
93:b7:84:a7:25:05:6d:4b:3f:61:cb:4e:37:26:42:
9f:d5:5e:d6:b2:64:a5:44:e1:03:3c:26:28:91:9c:
d2:8e:2c:64:be:49:ac:6c:8e:c6:9f:7b:de:4d:84:
83:61:60:5c:db:3a:29:af:de:f5:22:63:51:24:e1:
cb:ab:69:7a:f7:5c:f9:b8:bc:f6:cb:d8:4c:72:d4:
8d:d6:df:fd:6e:2e:c0:7a:75:c2:14:1b:a9:26:64:
99:ff:34:41:13:f9:42:7f:2c:96:18:8e:de:63:09:
d8:b1:19:cc:0a:48:b1:bc:f1:bb:22:5b:27:a9:fe:
4b:4d:3c:ce:3b:11:22:3c:db:a1:85:28:cb:6b:96:
c4:fc:23:39:8a:cd:60:8f:57:70:0d:eb:02:35:45:
02:26:a2:6a:c9:bd:80:0c:be:06:25:8b:18:e6:b0:
96:97:52:6a:73:c0:5a:85:2a:df:db:fe:27:2f:04:
bd:60:8a:d8:7b:0b:69:75:1b:ca:c7:1f:65:03:62:
51:d7:86:9e:cd:cb:df:d7:3d:00:11:dc:b5:0b:c9:
57:14:c7:4d:f4:0d:ac:1a:34:92:de:8c:a9:b9:de:
d7:78:fa:f3:38:d6:34:9b:fa:30:60:6d:24:a6:33:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:F8:A9:61:F4:13:86:0C:5F:50:F3:0F:00:30:D3:36:96:14:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34cdd6ac-b1df-3f12-ad88-6b8ceaf593dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:23:17:4a:cd:d5:7b:bb:4e:97:26:fd:74:1e:51:8b:f0:68:
01:d8:a3:7c:c1:44:c3:b5:dd:59:76:65:ee:6c:51:3c:7c:c3:
15:25:74:3f:0c:cc:ba:47:a2:34:f6:89:64:8b:92:15:f7:73:
52:93:87:3f:99:dc:85:f8:e3:01:8d:41:48:fd:17:1d:76:39:
1f:2f:2e:01:7b:71:4d:9d:19:fb:eb:c8:b0:d8:3c:42:b5:47:
fd:2c:eb:a3:3c:05:70:38:c4:d0:cf:8c:7a:7e:c8:50:ea:31:
59:69:1d:64:5a:e6:cc:6d:60:70:e9:58:33:24:1c:e7:19:fc:
35:70:6c:2c:bf:0e:4b:7d:c7:41:58:eb:19:c8:16:98:a6:bc:
88:ba:5c:b8:ba:1e:de:bc:18:d3:75:e5:e8:3c:d6:28:9d:76:
39:26:32:6d:fb:88:e0:b6:5c:02:6a:93:57:ca:fa:ad:bb:7c:
57:86:be:e0:4c:25:14:79:d6:b5:e1:fc:8a:f0:2d:f9:dd:ee:
c2:01:b7:2a:b9:4c:ce:29:84:f3:8a:ed:4c:f3:ac:a4:44:1b:
03:19:e5:f8:ae:66:27:d9:d2:86:ce:64:97:36:d9:77:06:ce:
64:aa:5c:a0:4f:8f:bf:89:5b:fb:e9:6b:5c:dc:a5:2e:1d:57:
ef:31:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:44 2025 by rpki-client