Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a043beb-6528-320c-b568-3119d4f04acc.roa
File: 2a043beb-6528-320c-b568-3119d4f04acc.roa (raw, json)
Hash identifier: s5pmKutSSNSEem8X4OViK7T6Yt24Ul4JAkRK948n8io=
Subject key identifier: C6:7A:D2:6F:EC:5E:4D:4E:FB:89:94:C4:A3:8C:24:79:B2:35:2F:4B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD2E41B6EAD655698E5273500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a043beb-6528-320c-b568-3119d4f04acc.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:e4:1b:6e:ad:65:56:98:e5:27:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=8c749184-a182-42ea-aa5d-d3425888a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:6c:14:85:7f:95:82:24:d0:9d:7e:0b:de:
31:9f:c0:c3:46:7d:fc:ba:12:8e:dd:1e:c8:2e:7c:
2e:68:82:53:b9:91:3d:c7:7a:eb:0d:6a:71:00:0b:
ac:a0:4d:09:1a:f1:ae:eb:0d:1b:49:23:f6:69:af:
c6:e9:61:ef:05:9e:e0:48:12:d3:46:a8:a5:ae:8b:
d3:46:c5:40:bb:60:eb:38:3a:ee:61:89:44:53:bc:
fb:98:32:e3:c1:98:3f:91:f2:d5:37:9e:5a:8d:fa:
1b:c2:49:e7:47:63:57:b0:d7:55:f4:43:ca:7d:ce:
c4:64:ef:d7:b1:21:1c:38:74:6e:57:2c:23:00:19:
74:4d:63:f1:e9:1e:10:ff:9f:79:04:22:54:e7:b4:
72:6b:d9:4d:44:e2:08:07:d0:dc:50:82:1f:72:75:
ba:e8:a0:a9:a0:cd:89:b8:67:3e:1d:c7:fd:e3:91:
14:c4:dc:5f:f2:4d:40:48:ea:2e:dc:88:a2:9a:73:
f9:49:a0:7e:7e:45:16:21:79:8d:26:f9:7c:42:9d:
5c:e9:6e:3a:10:83:91:04:61:45:57:12:7e:fb:2d:
89:49:b0:6d:5b:e4:a8:8b:44:3c:c9:54:d8:8f:a7:
14:b6:5b:d8:7b:e3:c3:25:13:dd:de:25:ba:a1:e6:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7A:D2:6F:EC:5E:4D:4E:FB:89:94:C4:A3:8C:24:79:B2:35:2F:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a043beb-6528-320c-b568-3119d4f04acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:02:67:1b:74:ef:96:d4:72:8d:76:2f:34:d3:67:3c:5f:10:
2d:8b:6c:d0:6a:cd:6d:a2:bf:43:23:19:06:83:49:5f:b1:b5:
ae:4b:63:7e:f5:86:12:3f:06:ce:45:31:3b:82:df:55:3f:9f:
25:1b:f2:15:8b:32:a0:ef:88:62:13:ff:7c:49:7e:88:63:25:
96:1c:3e:78:90:b0:49:84:5a:43:a5:d5:52:92:62:20:1c:d7:
16:2c:1f:4a:c0:58:f2:30:07:cd:7e:6c:22:5b:54:80:41:a8:
54:2e:4b:bb:5c:f0:e2:08:3b:22:46:6e:a9:cc:24:91:f6:00:
88:c1:6f:ac:3b:77:93:a0:be:c0:a6:86:aa:87:e3:e3:ae:23:
bf:97:3c:01:fd:be:f6:02:98:66:fc:3f:9d:f4:5a:f6:7a:87:
e0:c8:fe:e7:fc:d5:32:8c:5b:d9:ae:7f:21:61:2a:15:be:b5:
d5:58:fa:93:15:56:c0:7e:b6:f1:c4:e7:c1:ac:48:e6:37:e1:
bb:ff:5e:ca:0f:27:2b:70:9a:64:d1:14:d2:b4:17:75:02:80:
b0:f6:ca:15:6c:57:d4:14:db:fd:bb:b7:4f:d2:d1:b1:bb:db:
43:3a:bd:93:fd:ca:d7:93:99:4b:4d:fa:5c:b6:0e:17:14:26:
3e:83:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:29 2025 by rpki-client