Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c586f8d0-7343-3296-ad02-c40454b2e7bc.roa
File: c586f8d0-7343-3296-ad02-c40454b2e7bc.roa (raw, json)
Hash identifier: tfOU6EFh/abEAk5IbT4ABOMERx0z5K+IWj/qRN7q++s=
Subject key identifier: AE:22:A1:1D:C9:8F:8A:9B:CE:33:D4:AF:73:16:5A:24:89:36:AC:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCED79472778EAB3D9F586CA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c586f8d0-7343-3296-ad02-c40454b2e7bc.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:d7:94:72:77:8e:ab:3d:9f:58:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=4c4428b9-9c69-46d1-a6ab-0fc16634ff1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:43:32:93:03:46:03:75:3f:ea:65:6e:63:
43:e7:94:c5:b0:64:42:49:9f:1d:8d:f2:81:37:91:
7d:5b:af:00:b8:59:09:ab:24:1c:58:63:71:e1:80:
2e:43:88:2e:cd:3e:6e:08:7f:fb:11:8a:cd:3d:7d:
5c:dc:e3:c4:c5:ad:5d:b1:0e:01:9c:db:72:5d:fd:
57:13:e6:97:fc:52:e8:0d:a1:4d:7f:5a:05:b0:93:
76:38:84:9a:5a:ee:99:a9:64:46:01:1f:86:b1:2d:
70:2e:1c:e4:cf:f1:a4:9c:f6:08:eb:b1:b7:69:0f:
f2:1d:37:f9:bd:50:5a:d9:a0:50:bf:f4:da:78:bb:
b0:41:d0:50:de:cb:40:4e:b5:a3:c4:52:47:e5:2e:
7b:23:68:31:04:5d:f0:7c:94:9b:78:1a:37:63:23:
16:04:22:ad:87:cf:f6:1e:5a:46:f2:df:a1:24:3e:
ea:9f:7d:22:ad:97:77:21:94:e2:9c:0e:cc:0c:4f:
ad:d3:96:20:68:cd:88:31:39:39:34:16:7d:8e:bf:
78:de:63:27:4c:a9:de:fa:60:18:8f:e2:96:d6:3f:
93:d9:86:c5:d7:64:33:f2:57:ad:a9:80:a3:66:89:
9d:64:32:9c:cb:34:36:53:72:cb:25:31:e6:64:7c:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:A1:1D:C9:8F:8A:9B:CE:33:D4:AF:73:16:5A:24:89:36:AC:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c586f8d0-7343-3296-ad02-c40454b2e7bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:38:41:ea:cc:64:63:10:08:51:0a:dd:e7:9c:67:fe:61:06:
e5:4d:bd:37:36:6a:65:75:f1:60:70:f4:d8:77:98:c1:c1:f2:
2f:13:eb:7a:c6:cd:98:6e:3d:92:23:6f:00:25:38:78:61:4f:
36:f2:15:36:bc:7c:bd:5e:4a:9c:3f:6d:4e:84:84:5f:70:96:
16:64:46:3b:cc:a9:5d:1e:1b:13:31:bc:a0:e4:09:79:72:63:
08:24:97:9b:78:93:0c:56:d8:33:70:42:43:91:e9:ed:5e:ea:
00:b2:79:a9:96:71:49:06:77:7a:b3:11:02:f1:2f:f2:6c:8f:
26:1b:0a:ff:2e:9f:a4:94:eb:72:4b:0e:cb:89:1c:ce:81:4d:
a1:b7:a7:2b:ff:c4:00:a5:8c:cb:d3:5d:be:8e:bc:89:d2:a1:
43:08:61:d5:c6:cf:6b:07:57:52:fe:88:ad:5a:f5:24:97:a3:
ee:4d:6e:75:89:88:3e:1f:e4:61:4d:44:a5:3d:58:d0:e2:65:
c4:d3:71:31:5a:30:a9:4f:3a:f0:9c:40:00:4b:2e:b9:f1:af:
c8:8f:18:13:1f:c1:93:b2:3a:55:62:d5:9c:52:32:16:de:7b:
7f:dd:3d:9d:b3:b3:e8:08:9d:24:11:8e:a6:20:a8:eb:fd:0a:
75:41:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:31 2025 by rpki-client