Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eb36e-200e-332f-8ce9-85272d5a22f9.roa
File: 3d9eb36e-200e-332f-8ce9-85272d5a22f9.roa (raw, json)
Hash identifier: ZMU8mSg0494ysg04ZWU+zEc94hDfz//29pX9GRpNgIU=
Subject key identifier: CD:B6:8A:01:F6:79:BD:D6:0C:E5:FF:0E:27:EC:83:CD:2C:7C:C6:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B96F481A7F81E89021A0DEC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eb36e-200e-332f-8ce9-85272d5a22f9.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:6f:48:1a:7f:81:e8:90:21:a0:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=82e1044f-4ae6-4bc5-8281-2559c90bef6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:cd:f7:15:a5:19:a0:6f:6f:18:9b:fc:43:
44:62:1d:c3:90:db:76:6a:a8:4c:0f:1b:5f:db:9d:
85:2c:18:5e:23:42:4f:95:6b:34:7e:f9:2c:7b:64:
00:40:04:be:ed:86:54:58:0e:0f:68:d8:78:1b:26:
60:b8:12:67:0b:f6:07:c2:96:14:75:3f:32:c5:e2:
d2:8a:be:46:ef:03:8f:d5:18:86:7c:75:d1:c5:5f:
e6:e8:fe:e6:2c:53:58:54:96:cb:77:ef:bf:0f:7d:
09:b7:d9:15:a5:45:f5:92:99:72:5c:3c:76:1a:13:
3a:52:f0:05:5d:be:f0:46:5a:c1:51:49:b8:9e:f5:
fe:29:07:44:4c:15:43:cc:23:80:0f:3e:62:91:6b:
49:25:e2:69:a0:b6:34:66:24:ad:e4:bf:3e:23:de:
06:ac:11:61:97:8b:d0:e9:35:42:2d:78:44:86:6b:
e1:1b:01:bb:07:c4:0f:15:ea:22:3a:30:a2:41:93:
30:06:17:8a:4a:31:5a:df:8f:eb:b6:41:63:ff:a4:
98:28:06:b8:eb:14:ed:a2:b8:7c:e6:c2:98:64:54:
ac:b3:08:01:0a:63:35:03:7f:79:e9:e2:01:bb:4c:
06:e0:47:28:4e:54:fb:c7:79:cf:26:3c:52:94:77:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B6:8A:01:F6:79:BD:D6:0C:E5:FF:0E:27:EC:83:CD:2C:7C:C6:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d9eb36e-200e-332f-8ce9-85272d5a22f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:fc:0b:c6:30:8b:d7:7b:74:d4:fc:5b:97:8c:be:04:a0:e8:
8b:a1:82:ec:1b:91:75:6a:db:22:d7:02:f0:1d:ca:95:df:93:
61:be:25:75:c2:5c:18:e1:f3:5c:15:80:03:18:5f:6f:75:9a:
80:3d:b7:e6:d7:2b:ae:09:ec:94:bd:72:39:9b:a7:be:8a:80:
84:0d:ca:29:32:d0:7f:7a:85:ba:53:8b:76:3c:64:0b:63:29:
b0:a7:8d:f9:be:7d:30:1e:59:3e:06:6b:07:6f:79:cd:59:c6:
bb:ab:35:3d:85:78:88:1e:86:d7:22:5c:85:ec:48:c6:6d:0a:
73:b2:97:c2:6e:54:a0:a4:69:c9:ef:e3:1b:1c:30:94:a3:e1:
29:16:c9:f9:26:5f:ce:78:18:07:49:c2:ce:46:6f:e1:d3:f0:
25:80:d4:15:51:16:a7:19:38:63:cb:c3:2a:72:0b:10:17:14:
2f:54:f0:9f:43:5b:10:95:c3:68:88:fb:b4:bb:f0:8e:0f:b0:
81:38:f5:fb:ea:ac:3b:91:50:d6:da:36:93:2f:12:bf:8b:75:
67:f5:d4:3f:44:e1:db:43:4b:de:7a:49:0e:a9:3b:e3:52:86:
ab:40:1a:6f:d6:ba:3d:25:da:d9:43:6c:26:ce:93:b7:e7:71:
24:07:3b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:10:49 2024 by rpki-client on console-ams.rpki-client.org