Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33c9caca-861a-3344-8c6a-00848e8194d2.roa
File: 33c9caca-861a-3344-8c6a-00848e8194d2.roa (raw, json)
Hash identifier: o0z2ED7UvmS+2oJebf05u9eM8Qm3INzn8UlpapjaM/0=
Subject key identifier: 95:38:58:F0:87:4A:8A:96:CD:A6:9B:67:21:68:74:31:9F:BD:B9:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1E5AE8C57F10D54BC85ABC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33c9caca-861a-3344-8c6a-00848e8194d2.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1e:5a:e8:c5:7f:10:d5:4b:c8:5a:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=48fa6a4f-822a-4ed0-bf8a-96dec8c20e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:e5:a6:3c:7b:07:19:5f:72:ba:0c:f5:0e:
f9:ae:28:01:37:2d:51:6a:8c:a5:ee:fe:c5:ba:fa:
2a:b2:d0:36:38:5e:58:ac:7f:90:c6:1f:db:39:e6:
04:cd:b2:39:0c:09:6d:68:86:d4:f5:01:d7:5d:73:
3c:74:1a:72:5d:30:8f:83:07:ab:e7:78:5f:c9:84:
90:e1:36:ec:19:a0:1d:2a:39:13:ce:0c:72:ec:5c:
3e:ca:fe:81:34:f5:c3:2a:de:4b:67:3f:dc:4e:ab:
71:f5:77:07:c4:9a:14:29:a1:52:f6:9a:27:1b:b0:
4b:4b:19:7d:2f:c1:13:eb:0e:12:5c:0a:0b:90:34:
26:c1:43:e3:af:3a:95:50:81:5a:13:1a:09:6b:e2:
95:2f:59:bd:e4:53:fc:ec:1a:f6:38:96:b8:07:ad:
06:1c:68:9c:96:58:46:2c:78:d1:d7:7d:41:df:05:
a6:df:2a:ce:5a:70:b5:70:2c:68:8e:af:45:0f:67:
b7:00:fd:ce:5e:a6:5f:9a:01:f2:05:87:ad:17:fd:
d9:82:d9:96:e2:d0:10:08:a9:fc:54:1e:2a:d3:78:
28:a0:15:e2:aa:8c:8a:3a:d0:ce:33:ac:1f:04:4c:
c4:79:e2:64:ea:cd:cc:31:47:b7:9c:b3:fa:b7:15:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:58:F0:87:4A:8A:96:CD:A6:9B:67:21:68:74:31:9F:BD:B9:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33c9caca-861a-3344-8c6a-00848e8194d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:cf:9f:c5:47:8d:8a:45:76:52:72:65:0b:2d:9e:64:1c:bd:
42:d8:56:f7:bf:41:9e:41:40:32:02:83:cb:a9:61:56:b1:16:
62:c0:1c:d1:dd:19:4b:63:38:09:63:6b:09:31:63:20:20:27:
b1:43:c4:b7:b8:b8:93:b5:4b:ae:11:80:58:a2:a6:f6:93:ca:
45:95:3d:e2:07:ab:a6:26:40:a8:1d:ff:ef:93:47:b8:5b:d6:
a0:f5:b8:3c:de:e7:b2:58:83:84:cb:5b:d1:e1:24:cb:9c:7f:
9c:d4:30:5e:59:77:95:78:d7:9b:a1:ad:12:a2:61:ed:38:c4:
e8:ab:c2:1a:00:97:71:fa:6c:fd:c6:10:fa:e2:6a:53:8a:0c:
94:96:c7:ee:82:ae:b5:68:57:23:7f:91:52:fa:12:85:af:20:
82:a3:e5:f8:10:55:f0:3f:af:ad:51:b6:c4:81:b0:23:9c:61:
a1:66:9b:8f:c3:ab:fe:b0:fd:cf:e4:59:91:f8:a8:c6:19:72:
fc:26:ad:70:9a:cb:e4:fa:91:5e:47:12:00:17:f3:e6:98:7e:
80:4b:42:c1:f5:f1:5d:75:57:8f:9b:6b:c8:bb:56:61:60:87:
78:6a:2d:fd:48:79:13:9a:6b:e2:1f:7f:81:2e:b0:57:30:66:
5f:72:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:43 2025 by rpki-client