Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/15972e90-7f75-3311-b104-e1208a5c4c77.roa
File: 15972e90-7f75-3311-b104-e1208a5c4c77.roa (raw, json)
Hash identifier: AhgSM5spZ1AfWTC8l3sk3WC4I8wx9Qif7jxKGm6hGLY=
Subject key identifier: ED:33:E9:C0:30:22:5A:6B:A9:29:7F:8D:6F:C5:DA:9F:AF:4A:EC:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE475FB55CCAEF7CEDCE4A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/15972e90-7f75-3311-b104-e1208a5c4c77.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:47:5f:b5:5c:ca:ef:7c:ed:ce:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=3bfe66d5-4d24-4c56-ab03-bf7a023e4dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:c8:da:99:e3:2d:e1:84:e5:af:66:de:be:
67:45:fa:a4:b6:4f:58:a2:d2:4c:f0:e1:f7:7b:5a:
d1:5d:39:f0:b8:a7:42:b2:50:88:a3:a5:c6:13:01:
5f:eb:4c:23:4b:18:bf:9a:f6:96:67:16:3b:1d:03:
16:ae:b4:44:df:2e:e5:ef:54:05:80:5d:89:2a:6d:
cc:6b:56:ea:fb:a0:9a:48:02:fa:0f:95:67:0b:38:
81:67:7d:15:0c:83:be:3d:e2:dc:7d:fc:02:e5:9a:
8e:0c:45:62:d3:48:de:5a:8c:0e:d3:db:c9:77:34:
03:4c:60:57:07:25:72:02:cc:ec:b2:e6:8c:b7:a5:
3e:da:98:54:16:1b:e6:30:77:0e:43:27:89:87:a0:
c1:85:f7:ca:ca:54:ce:69:e3:7e:ec:28:a8:9b:58:
29:6d:40:cc:1e:16:c1:b1:35:2e:b1:ae:c5:81:f2:
0a:30:f9:1d:76:08:db:e2:f7:02:16:51:6f:48:8f:
6e:09:29:26:3a:7c:ab:8a:d3:e7:eb:73:11:55:5a:
c6:9b:b1:88:c3:c1:03:b1:c3:d8:48:23:a2:c7:4c:
03:e4:1e:21:4c:d4:98:27:86:e1:af:7a:c4:d7:e8:
e6:52:60:82:ec:50:4b:f8:4a:5b:e1:d0:a9:c4:19:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:33:E9:C0:30:22:5A:6B:A9:29:7F:8D:6F:C5:DA:9F:AF:4A:EC:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/15972e90-7f75-3311-b104-e1208a5c4c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:26:c5:0d:6f:22:54:89:df:58:8a:4b:55:48:76:04:5b:70:
b1:cf:5b:0c:c8:ac:f2:7a:3e:d3:62:31:7b:68:04:ab:38:33:
90:4d:16:cd:73:d4:03:a6:43:d5:4b:e4:6a:1d:d7:04:ec:4b:
fc:1b:40:01:92:12:0b:cb:25:35:0a:c9:5c:ff:08:b1:df:a1:
7b:da:cc:1f:70:48:66:f7:73:d2:4b:d7:58:fe:e5:fd:40:65:
f5:37:0b:26:40:4a:73:a7:a4:88:23:5a:17:b7:7d:c5:be:e7:
95:6b:a9:fd:33:b1:47:55:4b:f8:db:14:c2:e5:2c:ff:c7:fc:
58:8e:fd:fc:85:25:aa:35:a3:6d:fc:4c:f2:e2:5b:58:42:d3:
f2:07:89:68:bc:49:32:13:6b:6a:c3:7c:e8:b1:b0:03:0c:44:
cd:a2:4e:80:14:2b:f4:6f:aa:88:aa:e7:48:61:00:72:d2:8d:
1d:e6:62:e6:fa:fd:ce:3f:94:56:23:c4:52:57:0c:09:65:67:
cf:7a:3f:55:0c:35:2d:14:14:84:91:31:32:da:a7:d9:0a:0e:
2b:6a:cf:ed:4e:e7:a9:e5:d0:1e:02:6f:8d:78:7d:48:43:6f:
e8:7b:b9:d7:6e:de:44:0b:50:8f:7a:de:19:1f:db:07:ea:38:
7c:5e:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:16 2025 by rpki-client