Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e25f98f7-338a-342d-9a08-5fb5342b7e8c.roa
File: e25f98f7-338a-342d-9a08-5fb5342b7e8c.roa (raw, json)
Hash identifier: pnoC1F4pTZlqMUJ7bVsEzepXO4jJX4z+3sAcSMoxUa0=
Subject key identifier: 1B:7B:2A:CD:10:50:AD:C8:7E:98:42:B4:87:BC:10:CB:79:0A:C0:7F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA7C1C9C04BA4A0D750232800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e25f98f7-338a-342d-9a08-5fb5342b7e8c.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:c1:c9:c0:4b:a4:a0:d7:50:23:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=a3950ebd-151a-4a46-a1e7-614129b03b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:c7:f1:17:1e:7a:58:3d:43:14:96:90:ee:
86:1c:d8:a6:2c:2e:b6:76:98:ce:6a:61:cf:43:ae:
0f:80:7e:9c:d6:d4:28:ae:8e:6e:d8:da:d2:dd:aa:
d4:7f:18:e3:ac:e5:01:1b:d3:1c:12:35:5c:24:34:
bf:16:8b:ac:9b:e0:b5:cd:35:02:95:bc:28:eb:40:
7b:c4:21:c9:7e:12:15:28:10:35:4d:99:27:8e:2a:
5f:70:b3:65:2a:bf:be:87:98:50:50:89:3d:b4:34:
d5:65:0a:db:a3:e5:ee:66:79:d8:db:0b:ee:b6:ed:
9e:61:fc:f7:83:e0:ab:99:c0:f7:55:c1:46:4f:a2:
6e:80:94:fe:88:db:81:85:34:7a:3e:58:3a:cf:4d:
39:70:f9:0f:72:39:7c:9e:74:9c:34:f1:39:73:e3:
6d:13:f3:58:0f:a0:c6:90:b6:cf:a3:38:de:62:d1:
9e:21:1d:93:d3:85:67:e3:57:fe:fa:74:67:6e:62:
67:33:ec:b8:79:41:ef:6b:f8:0b:08:a3:5d:52:fd:
ad:33:ad:c4:d4:e5:17:67:00:84:ca:c0:a6:85:5f:
2f:0f:08:02:fb:cd:66:7a:83:cb:7d:be:7e:2e:d2:
89:81:d9:ca:e4:e1:3c:c2:69:89:9b:0e:14:88:e5:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7B:2A:CD:10:50:AD:C8:7E:98:42:B4:87:BC:10:CB:79:0A:C0:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e25f98f7-338a-342d-9a08-5fb5342b7e8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:c5:fb:1f:da:00:95:05:57:23:2b:35:b5:68:9a:bb:cb:63:
50:5d:0d:2d:fc:8a:23:79:5b:92:38:da:70:b4:d1:24:16:ac:
6c:37:e3:88:43:7e:3e:2b:37:83:54:52:69:fe:91:8c:1f:96:
e5:30:cc:74:b7:f9:e7:01:b2:33:c1:f1:eb:77:37:a5:20:28:
b1:47:a9:4f:19:70:3e:85:23:a3:cf:e5:f0:45:e1:a1:f9:a3:
cb:bd:5a:e5:ba:25:23:ff:81:8a:a9:48:af:7e:74:b7:4f:9e:
c6:22:4d:fe:34:a3:62:ea:82:fe:e9:bd:dc:0f:90:d8:a9:01:
8e:a5:f4:69:6b:34:7e:d9:cc:00:5e:ba:d3:66:bc:7b:19:e9:
e3:78:af:e1:a5:ec:c9:1e:2a:28:e8:e2:19:84:b3:09:2f:97:
d6:0c:c1:04:0c:32:89:b2:93:43:32:fc:b2:03:f9:ca:06:d9:
ae:81:69:41:34:e5:90:f9:5f:a0:bc:63:05:48:d6:eb:84:fa:
2a:2e:04:14:6d:0d:88:81:58:8b:5e:f1:88:af:08:99:92:15:
83:a1:ed:19:81:b2:a1:c1:41:e5:1e:7c:27:e1:58:0e:d5:e3:
6f:64:11:dc:4d:1d:73:06:7b:ea:71:76:f9:43:f1:ef:54:ce:
54:92:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:00 2025 by rpki-client