Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d4476dd-8ee2-3dc5-8655-202173c3226f.roa
File: 2d4476dd-8ee2-3dc5-8655-202173c3226f.roa (raw, json)
Hash identifier: w/yvfY2Be8wa/iQoZzJnzbbNsxvIfNMMu6w6djfc09I=
Subject key identifier: 42:5E:22:C3:AD:5C:9A:89:B7:F5:37:4D:04:A2:49:B7:BB:90:C4:6A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F1EB8ADF08CCF4D7C3A70F8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d4476dd-8ee2-3dc5-8655-202173c3226f.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:1e:b8:ad:f0:8c:cf:4d:7c:3a:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=486c3df4-f9c0-4273-9267-d32c89a15db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:dd:32:61:a1:0e:cf:1f:d9:6f:a1:68:e8:
07:66:ee:90:2e:d3:ea:b2:2e:32:a4:2f:5b:83:75:
85:7c:53:6e:cb:ca:30:25:80:43:a6:1e:10:63:40:
7d:6e:39:94:0a:32:e5:a6:66:ea:7f:72:96:db:ed:
f4:3f:fa:88:84:d7:60:be:c2:93:9e:bd:f5:1f:42:
c5:09:1e:05:45:a0:b3:12:fe:c2:2d:b5:07:2d:23:
25:da:94:90:7d:0f:bb:3a:31:55:ec:cb:eb:96:d1:
1e:9e:95:94:75:12:82:b9:29:9e:0e:09:6e:71:4e:
37:3c:d9:37:95:fb:b4:5f:e3:da:08:85:91:0e:22:
d0:23:95:c7:4c:06:e9:57:bd:bf:2b:dd:4b:0a:6b:
07:4d:1a:24:d2:f2:20:cd:50:c5:c7:37:7a:83:32:
15:04:ab:ee:b9:5d:8b:5b:9d:70:d3:a1:a6:e2:4b:
5a:9d:75:36:32:e1:67:b4:af:0c:93:76:87:ec:9d:
2a:42:ba:3e:af:0f:5c:83:f8:e6:6b:8b:23:97:c6:
4f:d9:11:07:43:cc:e1:e4:37:a2:4d:de:29:f1:f2:
10:31:c7:01:57:00:9b:8d:88:31:2a:e3:fd:a4:70:
22:ee:6d:67:e6:0b:c7:31:52:be:30:79:5b:19:51:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5E:22:C3:AD:5C:9A:89:B7:F5:37:4D:04:A2:49:B7:BB:90:C4:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d4476dd-8ee2-3dc5-8655-202173c3226f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:cd:8e:6c:5a:2e:89:5d:c4:a5:54:30:3e:f3:18:5c:d8:7e:
15:9e:e4:96:c9:cb:a8:76:60:5d:98:4e:ca:0a:ec:57:2d:2a:
a9:79:69:dd:5e:9e:39:5d:d8:ca:14:51:38:90:00:8d:ce:d8:
c3:13:95:e7:bb:1a:06:7a:9e:4d:20:0a:7f:08:66:3e:71:e2:
ac:b6:f7:e6:7a:3f:75:5e:c3:13:11:12:ea:8d:b8:fd:c1:1f:
e8:b8:07:68:d3:c0:31:5e:31:4d:a2:fb:db:fd:2f:b6:bd:56:
7c:44:04:15:7a:fe:cc:a2:25:55:2a:3d:9a:9b:53:27:5a:2c:
ad:9a:50:5c:2d:f6:e6:66:2b:44:af:05:0b:de:62:8c:c6:03:
be:71:cf:87:fe:39:de:c9:af:b4:be:c2:76:67:67:16:b5:e8:
cb:20:88:53:a8:f1:bb:71:64:86:38:24:e9:ca:da:83:bc:06:
c4:a6:50:5f:d4:52:08:74:ea:24:3d:4e:e7:68:af:e8:fb:e0:
20:ef:bd:4e:e7:c0:93:c9:90:ff:0e:eb:19:4a:76:10:09:3b:
77:98:57:5e:7c:b0:8f:a5:d3:b0:12:a2:93:09:1e:38:60:5c:
06:1c:36:5b:50:f3:7c:55:f6:1b:e2:8b:5e:e3:93:74:3d:bd:
7f:2e:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:40 2025 by rpki-client