Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b7659c3-91b0-39d5-988d-87844e35884a.roa
File: 3b7659c3-91b0-39d5-988d-87844e35884a.roa (raw, json)
Hash identifier: u0xNiG8kKrp2RaKEiyvQzB0f1Jw5acTgTiEXocUn03o=
Subject key identifier: 58:96:C6:9B:47:30:48:3A:BD:FE:5E:75:DD:22:FE:1F:A1:A9:DB:CD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E4657514A0572DA4451621B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b7659c3-91b0-39d5-988d-87844e35884a.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 208.110.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:46:57:51:4a:05:72:da:44:51:62:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=8a5d88af-b48a-4e93-b8f4-4236736093f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:cf:6a:b9:0e:13:40:7f:f7:8e:8e:d2:44:
cf:3e:5a:43:89:b9:04:3e:6c:73:ef:03:be:45:de:
84:96:45:b6:ef:59:43:b4:15:6f:3b:1e:12:e3:d9:
a3:78:c5:fa:0e:7a:25:4a:0e:14:eb:72:f3:53:94:
f2:66:3c:16:f0:a3:1e:65:c5:54:79:5f:9e:3e:71:
04:d4:6e:55:38:da:65:4f:b6:69:dc:77:a7:09:cf:
e4:2a:dc:e3:c4:8c:ed:43:75:2a:44:49:5d:c9:d2:
04:12:21:0b:df:c8:49:02:7f:6c:d0:fe:41:58:63:
71:a5:25:c2:5f:5a:07:12:96:ee:01:6f:cb:08:6f:
65:7b:83:14:9d:cc:73:ac:6b:c1:ce:7b:4c:67:63:
7a:79:33:e1:39:19:ec:0f:40:18:97:9c:49:e7:e5:
fb:60:0e:11:4a:1c:3c:3c:9e:b6:40:f4:f5:2d:7a:
4d:2d:54:d2:d2:e8:ae:e4:4b:65:6b:a3:36:ba:af:
42:4d:2e:76:96:d4:51:c6:c6:65:a2:ae:d7:51:ee:
71:4d:5c:0b:f8:42:bd:0a:21:9d:7e:60:bb:22:38:
71:68:7a:5f:fe:bb:59:8d:ba:80:f4:65:b6:bf:3d:
58:2d:f8:72:38:17:7a:73:af:7d:b5:e3:e9:eb:b4:
12:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:C6:9B:47:30:48:3A:BD:FE:5E:75:DD:22:FE:1F:A1:A9:DB:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b7659c3-91b0-39d5-988d-87844e35884a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.110.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:91:fb:2b:3e:42:25:26:93:70:04:9d:44:f9:9d:6a:bf:7a:
ae:cd:34:5c:31:d7:f7:16:3e:3e:52:d6:f1:bd:78:79:fa:f7:
a7:5d:81:8e:08:cb:83:11:6b:43:d8:ad:69:c2:df:41:be:75:
8d:75:ee:2c:14:a5:15:ba:f0:02:12:3e:a3:de:49:08:d0:d9:
bc:cc:34:4d:a3:5c:5f:3b:48:67:29:34:6d:cf:bc:b9:53:e5:
a7:ad:c9:14:d4:54:ad:f5:0c:2b:34:07:e1:7c:6f:81:37:1d:
54:f7:c9:43:e3:20:46:30:a0:c5:2d:3c:38:ed:8c:b2:cc:01:
58:1e:ef:6d:8a:aa:dd:0e:8d:20:70:7a:5b:fe:d9:18:cd:1f:
a5:b4:51:71:6b:c5:4a:73:6d:62:74:1b:10:ca:80:bb:97:fe:
ab:f5:33:65:04:26:e2:a7:96:d1:92:37:26:fa:7c:8b:20:7e:
28:d0:88:b6:98:25:ae:19:3c:48:54:4b:c6:09:fb:84:60:a3:
82:85:86:32:2b:51:0f:73:2c:c7:ab:35:58:5b:63:6a:50:f4:
e7:1c:2d:b0:fa:ce:c8:f5:6a:f7:31:be:16:98:40:d6:48:45:
32:b1:cd:25:29:70:1b:28:cf:c9:dc:ab:f9:10:2d:50:01:23:
9e:0e:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:57 2025 by rpki-client