Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d681ba8-edb0-3324-beb3-a73da62f9b0f.roa
File: 3d681ba8-edb0-3324-beb3-a73da62f9b0f.roa (raw, json)
Hash identifier: cZ0D+lbF/38/BQINZLOtL/fsqESn399dJXB6mqGYSx8=
Subject key identifier: EE:E2:9D:AA:F2:49:C8:6E:68:64:49:63:1F:BF:16:DE:D9:76:43:82
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE2D2B381DB2FC88BF80F4AC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d681ba8-edb0-3324-beb3-a73da62f9b0f.roa
Signing time: Fri 12 Aug 2022 14:42:08 +0000
ROA not before: Fri 12 Aug 2022 14:42:08 +0000
ROA not after: Sat 17 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:d2:b3:81:db:2f:c8:8b:f8:0f:4a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 12 14:42:08 2022 GMT
Not After : Sep 17 04:00:00 2022 GMT
Subject: CN=976a61bc-09ed-4337-b46f-f5aed2e3ad39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:3c:83:4a:a9:cd:2e:b8:ad:0b:04:fd:bb:
be:c8:36:97:88:eb:49:b6:d4:3c:0a:41:45:9f:eb:
8c:61:63:6f:53:a3:ca:af:2c:56:3c:15:73:aa:06:
5d:51:68:9f:15:0e:f8:f4:4b:77:4b:72:5d:cb:fc:
ed:95:64:52:0b:2b:84:71:11:93:91:1e:cb:bc:36:
3e:ee:c7:bd:d9:b2:a3:2f:b2:b6:33:1c:3d:ff:09:
42:cc:a4:fd:a7:67:d7:ab:33:93:5e:98:13:e3:20:
15:a6:20:e0:0c:b9:f1:ca:95:a2:3a:cf:0f:46:27:
1f:51:7f:8a:32:84:77:67:ec:12:84:81:b8:09:41:
d7:a8:cc:3f:9f:74:8c:e0:e3:01:ee:cb:7a:37:f2:
9e:3d:3c:5c:de:fb:95:18:db:15:a8:0c:c1:60:40:
83:64:64:fb:3e:ef:03:be:22:5e:a3:37:d2:89:a7:
80:b6:7a:b4:1e:7c:fc:16:34:fd:f1:c6:df:22:78:
e7:7a:7f:5b:53:fe:21:e1:11:c4:d6:0a:71:5a:1a:
49:3a:61:e4:05:bb:08:b8:d0:03:d2:20:a8:1d:34:
07:18:b3:4c:da:73:7b:5c:f8:08:91:c2:28:a0:fb:
33:4d:74:cd:d5:2f:35:ff:a1:9c:ad:d9:cf:39:54:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E2:9D:AA:F2:49:C8:6E:68:64:49:63:1F:BF:16:DE:D9:76:43:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d681ba8-edb0-3324-beb3-a73da62f9b0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:14:2b:41:43:82:d3:cf:5c:23:f2:a7:c6:0d:c6:42:1e:f2:
29:99:fd:d9:c6:2b:73:18:52:ff:75:75:79:4b:4f:10:8d:a5:
3b:0f:97:02:68:07:76:0f:1d:bc:38:fe:f7:da:26:1c:90:0b:
e7:16:f7:e9:75:8c:ee:c1:6d:dd:28:a0:4e:86:93:a5:05:e3:
d1:c7:34:4b:12:a0:4f:d0:c5:8b:fe:e7:88:84:24:ac:da:4b:
a5:b3:8d:01:f8:27:6c:f4:64:24:f1:c6:08:84:58:fa:9d:7c:
1f:52:31:4d:22:e1:90:37:ad:3d:01:55:5d:0f:e1:a6:d2:d3:
8b:10:c0:c5:35:ef:f6:f9:ae:e8:76:c9:8f:48:59:98:16:b3:
ed:40:6f:12:72:8b:b5:02:7d:b4:ed:c2:e6:3f:39:fb:90:c6:
37:2b:0e:d1:92:13:2e:37:44:6f:7e:76:f0:ea:74:af:46:22:
cf:88:2a:04:7e:ae:04:42:9d:ee:7f:ba:9c:59:70:8c:88:1f:
d2:af:33:44:ad:4c:0f:f6:58:a3:55:bb:68:ce:8a:76:47:2f:
97:c1:23:32:16:7d:86:19:d1:ee:0e:0f:0c:b1:43:d6:73:e4:
f7:85:36:9e:ed:f7:c4:b0:de:37:64:2f:c7:f8:0f:04:0e:85:
c3:33:af:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:16:02 2025 by rpki-client