Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf0cdc73-0271-349b-9973-03b3fb204f88.roa
File: bf0cdc73-0271-349b-9973-03b3fb204f88.roa (raw, json)
Hash identifier: MVsjUC1BMP2/87wXlhtr8Lz07aM9hQdlJ8ZwuXSeU9w=
Subject key identifier: D6:B6:0B:DF:09:28:9A:49:D8:1C:EA:48:06:10:2E:07:22:52:26:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F310CB6814C57F36D463D5700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf0cdc73-0271-349b-9973-03b3fb204f88.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:31:0c:b6:81:4c:57:f3:6d:46:3d:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=d585295c-176f-4a72-8a9f-4ebbcd8c1add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:8f:9a:03:53:79:47:9d:20:f7:09:79:5b:
a1:2e:1c:ec:4d:6c:ab:b3:bb:54:cf:85:43:30:85:
59:34:0f:db:d3:2a:be:64:b3:90:1c:cd:11:f5:f2:
90:d4:26:96:73:5a:69:76:4f:d2:3c:30:cb:a1:73:
32:0b:06:1e:18:6d:f1:05:e7:67:71:ab:2a:bb:40:
d8:20:73:b9:c1:17:04:3e:de:9c:9b:a8:24:8d:32:
46:e1:3d:9d:1e:6a:9f:bf:18:e7:14:26:52:75:b6:
18:1d:10:e7:ba:32:8e:56:e3:20:90:f7:f6:a1:c9:
e5:ff:2f:29:25:44:84:a7:08:ae:72:b3:3a:37:fd:
c9:88:f6:d7:0b:bd:9f:ef:00:16:9d:2c:2b:6a:b7:
1b:c5:81:ae:be:17:c5:8e:f1:70:3b:43:29:d6:f8:
da:15:be:ed:ef:aa:94:f0:e1:7f:2c:ba:b9:ec:42:
37:b7:70:22:93:91:39:b6:70:97:56:24:4e:c7:45:
ff:2a:78:41:06:9b:dc:11:0f:dd:a3:9a:e7:6b:3c:
57:3c:7f:8e:71:a5:30:38:02:ca:f9:71:9c:6c:84:
95:a4:f2:94:cc:21:5f:60:28:63:17:ea:ea:c7:47:
7d:44:ea:56:a2:a9:52:ac:79:65:ac:63:cc:9e:8a:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B6:0B:DF:09:28:9A:49:D8:1C:EA:48:06:10:2E:07:22:52:26:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bf0cdc73-0271-349b-9973-03b3fb204f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:31:00:03:1a:16:70:0b:d4:d9:6e:80:f3:a8:7f:e0:eb:88:
0a:8c:d4:69:ae:b4:83:47:7f:1d:07:17:ef:c8:d7:9f:be:5a:
3f:48:ec:76:76:c8:bb:a7:05:2b:38:c3:f1:23:ea:52:11:a1:
71:2d:61:be:3a:3c:f8:5a:72:7a:1a:12:96:cc:5a:ae:1f:f7:
e5:c0:d9:41:87:4c:5b:02:64:17:2d:d8:15:a3:8e:f4:e1:73:
87:26:2f:e4:d1:53:2b:ce:40:9e:01:8e:70:d4:2b:87:b8:36:
a7:99:0b:f7:a3:5b:e8:45:fe:24:b8:62:5b:2d:be:67:b1:e0:
bc:89:53:c8:a7:58:1e:5b:0a:43:72:1f:55:3f:9c:d0:ff:46:
0b:6b:ae:ae:10:bd:8f:a9:22:52:c0:36:9b:9e:5b:ee:e6:89:
33:c6:47:78:5f:99:9d:58:c4:4f:0b:39:63:ac:2c:e9:1c:80:
a8:d5:84:a0:8f:94:72:35:7d:63:64:2f:27:39:37:b8:9b:04:
53:0d:a9:fb:f5:a1:a1:16:fe:3f:1b:fd:c7:54:33:c3:6e:9a:
bf:c7:7f:5e:32:49:ad:e7:b4:e7:f4:d3:c0:36:d4:9e:3a:ef:
fb:97:04:ee:3b:e4:78:65:6c:f8:70:2d:f9:8b:50:df:fd:c7:
98:14:f4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:32 2025 by rpki-client