Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f7dba89-e145-38d1-b3cd-a8f1502057f9.roa
File: 0f7dba89-e145-38d1-b3cd-a8f1502057f9.roa (raw, json)
Hash identifier: 3/X6xsIrBGAhvtq8ruzcxijGr/vO3bx/H68zWDCASiU=
Subject key identifier: F6:F5:48:D4:4E:4D:51:8D:DA:DA:3E:FD:58:51:7D:7D:81:0D:21:8B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D59CCDDC4CCA40DB112AA05A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f7dba89-e145-38d1-b3cd-a8f1502057f9.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:cc:dd:c4:cc:a4:0d:b1:12:aa:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=fcc510bd-ce07-4fce-a2ec-bb7b016597cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ee:a4:74:1f:7e:59:5f:08:8f:88:d7:bb:b5:
dd:e3:b7:01:9c:18:57:8d:88:d8:3f:f7:cc:ed:4a:
17:e2:0b:e6:52:94:f4:0d:e1:05:41:90:f4:7a:94:
f7:da:05:bf:24:65:6c:b9:5b:b8:2d:75:9c:02:d3:
22:83:32:b2:13:93:42:dc:b5:75:77:ea:e0:28:f5:
5b:81:6d:26:2c:5f:b3:78:b8:8f:a6:a4:5b:27:e8:
eb:59:ed:04:52:2a:0c:30:3d:05:c3:ce:ae:9b:73:
7b:e6:2e:6b:41:1a:ec:34:d7:8d:bd:23:27:27:f3:
2d:f5:34:db:80:a6:ac:ea:84:6d:5b:15:cc:db:0f:
89:84:9c:20:e8:18:a5:e0:2f:bf:4e:ee:b0:98:e3:
0a:38:50:d0:87:af:75:48:58:b0:67:30:51:70:14:
3a:21:29:76:98:08:44:58:8a:df:db:9c:e0:b7:75:
ce:a8:7c:a4:f2:3b:c3:9d:ab:ea:29:65:6d:ce:0c:
09:0d:16:16:3b:a9:e7:52:8d:c9:29:c6:1c:c6:06:
d0:1e:87:fd:38:9e:1d:f9:cd:91:80:39:63:77:c1:
06:7c:50:66:04:94:b6:e0:ed:d2:26:7d:89:e0:40:
67:e7:8e:b1:48:62:bc:a6:84:ed:c7:71:91:88:84:
05:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F5:48:D4:4E:4D:51:8D:DA:DA:3E:FD:58:51:7D:7D:81:0D:21:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0f7dba89-e145-38d1-b3cd-a8f1502057f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:40:ea:9c:0a:fa:7b:d4:f4:d6:5c:44:23:21:70:99:69:43:
0a:be:79:f6:41:2a:a0:de:41:8f:dc:a8:ba:e8:05:ce:e3:c8:
46:6d:5c:f4:e3:6c:55:c1:c3:9d:58:fd:01:c9:1b:89:69:e8:
36:2c:70:5f:68:de:0d:aa:96:bf:e7:b8:19:a9:7f:01:cb:a9:
4b:bb:b1:46:33:fd:d2:61:17:11:c1:cd:3b:8a:5b:78:67:db:
c6:64:f0:fa:e3:2f:76:f5:ea:ee:98:31:6a:92:2f:b7:4d:b5:
4d:24:19:19:53:76:7d:5b:02:be:dd:2e:8b:59:2a:4d:76:22:
a4:eb:87:9f:f8:91:4a:5a:cd:94:32:a8:10:af:2a:85:c7:b6:
7a:74:14:0e:3f:9f:51:69:2b:7b:f8:99:35:e2:36:59:e9:93:
33:b2:e0:01:cf:39:de:b2:10:19:01:1a:46:5b:d7:09:cf:5f:
90:7f:49:f0:f0:ac:1b:8b:98:46:5f:0d:80:40:4f:d3:5b:0c:
c0:79:86:30:8c:e3:6e:17:6a:6e:16:3a:03:bd:ac:20:93:aa:
70:2b:f2:5e:97:d3:61:f8:12:65:de:7e:67:bf:1c:63:64:22:
0e:90:2e:ca:7c:2f:50:30:80:72:15:29:dc:b3:c3:41:5c:46:
e4:ed:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:17 2025 by rpki-client