Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f825c968-18fe-334a-8a77-dceca2e76940.roa
File: f825c968-18fe-334a-8a77-dceca2e76940.roa (raw, json)
Hash identifier: MLzpv4TgLo31UYH3Js/BHhLctY9WEw5GivGyUAb7lXg=
Subject key identifier: 36:D4:83:E6:B7:78:B9:CB:C6:6D:DC:B6:04:54:8E:D8:3D:A3:54:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE53F1BDEC1BA02E1DF572ABA
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f825c968-18fe-334a-8a77-dceca2e76940.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:3f:1b:de:c1:ba:02:e1:df:57:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=0ee8fc84-4efa-41b0-a496-79c978410678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:76:2d:45:23:fb:7c:a3:63:18:f1:09:dd:
c6:49:4f:07:cc:ac:82:5c:e4:d7:87:42:35:9a:80:
4d:43:85:05:a6:3e:22:39:db:73:db:b8:a5:c4:99:
73:84:1d:e7:b9:63:07:34:54:41:c5:3d:49:cd:ba:
63:53:01:25:a4:cb:7f:93:f8:0d:70:c1:ab:f7:25:
3f:7f:ed:a1:90:ac:30:e4:df:95:1a:10:0a:93:ac:
cb:17:03:c3:9e:87:e9:39:6f:b0:0e:78:02:9b:1c:
4d:a6:d8:a6:9c:a0:dc:36:5d:fb:31:75:3f:af:fb:
37:f7:2b:f9:8f:31:2d:50:9d:c7:d7:9f:16:ff:9b:
40:42:39:5b:77:92:cc:0a:36:c6:6d:95:fc:33:42:
07:47:08:df:53:59:e0:49:ff:a2:e4:74:6e:2a:70:
8a:42:84:8f:ff:31:59:71:2a:cc:73:93:3b:90:f8:
5c:2f:ce:d0:3f:22:b8:ad:13:b7:68:44:24:bc:33:
da:bd:64:9b:60:19:cd:e8:14:1d:c9:38:58:18:31:
4d:86:a4:5d:dd:02:58:8a:db:b7:41:77:f7:f4:67:
0c:d4:96:14:1c:bf:83:86:15:65:7d:2c:f3:96:c3:
96:1a:ba:f6:b2:4c:d1:98:61:59:41:37:46:fd:a7:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:83:E6:B7:78:B9:CB:C6:6D:DC:B6:04:54:8E:D8:3D:A3:54:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f825c968-18fe-334a-8a77-dceca2e76940.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:5f:ce:42:1a:82:90:83:49:4c:96:7b:f2:c8:5e:b0:b3:c0:
87:4e:e8:9b:62:66:9c:a4:d6:a4:05:68:60:52:7e:2b:f1:80:
68:0b:b6:7a:7e:99:35:65:bd:ee:e8:b6:59:66:ce:b2:02:5c:
5d:f9:64:d2:22:7c:89:5d:c7:25:a5:55:d3:4e:f4:88:86:17:
64:c4:83:fd:54:2e:98:be:fc:55:90:66:3c:08:84:88:35:5d:
62:bd:3c:bb:88:de:21:67:b2:c0:0d:67:09:8d:41:fa:9c:13:
2c:92:25:42:09:95:47:55:99:02:d2:1f:bf:0a:6e:71:40:4e:
da:16:5e:83:11:ac:06:5b:86:b0:ca:b1:87:64:ee:8b:fe:a7:
bc:b0:8c:a2:b8:b6:ff:10:b0:30:30:e9:fa:c5:28:12:28:a9:
1a:85:dd:7e:44:ef:f1:76:b6:cd:87:c4:c3:3c:ed:b8:81:58:
f9:ce:78:3c:47:64:b1:d2:f2:13:45:be:6e:9f:4f:0a:bc:7f:
07:c0:94:dd:8c:88:f9:13:68:36:01:a8:b9:b0:a9:c5:52:cd:
cf:33:fd:cf:21:4b:24:f1:97:4c:92:5b:55:1c:17:7a:f7:15:
b0:6b:b9:bd:8f:44:ae:1c:a1:42:eb:88:f2:08:47:b5:6c:5f:
47:48:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:07 2025 by rpki-client