Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4ab91ac-30f9-3c26-acbb-172307c8da6b.roa
File: c4ab91ac-30f9-3c26-acbb-172307c8da6b.roa (raw, json)
Hash identifier: u//lPAN1Bvh7PPonMcsy7KVD/iFu5OsDpbxZATlp6Q4=
Subject key identifier: 21:3F:04:45:71:E4:D0:73:AE:8D:DF:6F:99:C3:84:6A:F4:C0:9B:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E9498A802F5103565B907E650
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4ab91ac-30f9-3c26-acbb-172307c8da6b.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:94:98:a8:02:f5:10:35:65:b9:07:e6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=6d7be980-c725-4887-95e4-7fd4ec61194d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:4c:a5:96:45:0d:79:55:50:43:d2:ea:dd:
57:6a:80:62:ba:33:ba:54:e6:d6:ac:7c:4a:de:f7:
68:1c:81:8a:49:b7:a9:0e:b3:e2:87:df:43:5d:89:
5f:4d:bc:52:b7:fb:5d:a1:de:0c:62:0c:93:95:f8:
2f:f4:ab:09:28:e5:5b:94:a0:76:05:68:a2:e3:16:
9a:60:a4:d0:d2:63:42:b5:a3:62:d5:fd:c6:ae:5a:
80:44:2c:71:a7:77:54:86:16:6e:39:f1:aa:50:e1:
d4:58:29:46:bc:60:70:23:a7:a5:e5:9a:c2:af:55:
32:c6:aa:a2:3b:9f:2e:2d:d0:57:7e:9c:cf:f9:ab:
17:57:5e:c2:21:90:f3:d3:8d:42:bb:61:f5:3f:7b:
f6:83:d2:97:0f:44:ae:da:7c:f0:26:aa:8f:5d:91:
7c:fc:d3:f5:61:6d:05:49:8d:73:3b:03:18:3a:3d:
0c:26:0e:1e:56:bf:53:5b:b7:30:65:ff:66:1e:3b:
9b:0a:1e:98:d1:d5:03:3b:9d:06:07:75:85:a7:80:
09:da:e4:e4:f5:30:03:9d:e1:4a:1b:4e:11:0a:eb:
43:be:c6:e9:7d:5f:13:76:6b:94:6c:28:cd:e8:a2:
c4:be:ae:49:dd:4a:11:86:61:97:e6:0c:c4:58:3c:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:04:45:71:E4:D0:73:AE:8D:DF:6F:99:C3:84:6A:F4:C0:9B:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c4ab91ac-30f9-3c26-acbb-172307c8da6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:42:87:0c:16:5a:af:e8:f1:c5:b8:43:62:cc:5f:8d:79:d4:
68:35:c8:37:75:6a:db:9d:24:45:1d:59:23:ae:c5:46:af:b8:
1a:0c:59:82:5e:cc:c4:82:04:a9:0a:6b:f0:4e:06:77:c3:fc:
e7:83:c1:da:44:01:df:be:c6:74:32:9d:85:b1:35:86:bd:3f:
e1:31:24:7b:56:d1:47:57:31:67:00:40:5e:18:68:3e:bb:5e:
3c:c5:12:b0:89:b0:de:81:e0:3a:99:6c:c6:db:1a:75:2c:9e:
27:3c:0e:bd:59:93:f8:d6:e6:fd:62:e1:f8:2b:84:af:6f:58:
86:df:71:71:2b:71:12:48:ef:ed:6b:35:5f:b6:d7:da:5e:57:
62:bb:19:a7:46:bf:76:11:97:91:17:84:98:d3:21:15:62:95:
83:ea:6a:17:dc:d5:bb:30:bf:96:01:17:66:39:f6:95:8e:a2:
eb:b6:a7:52:c6:5e:4f:01:02:c7:1d:fb:57:b5:1a:0f:2a:0a:
b5:de:95:a7:6b:2a:53:18:68:53:0d:43:a6:de:a0:58:57:c2:
7c:c6:be:a1:42:15:67:e5:bf:30:9d:e2:62:67:4c:ba:27:99:
19:2b:ea:19:29:d9:03:89:f2:f3:9f:45:d4:0b:6c:83:ee:16:
f4:35:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:40 2025 by rpki-client