Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/342a2e39-c722-3e51-a1b9-586af4c457e3.roa
File: 342a2e39-c722-3e51-a1b9-586af4c457e3.roa (raw, json)
Hash identifier: eb5Np3QXKBDPtSGEc/lbjz56ipQCW0J+9oEvIqWv0ec=
Subject key identifier: 45:40:02:5F:F6:F3:97:A0:0B:CD:AC:A4:92:A2:0C:60:CF:74:CB:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0B92E26F4890EF1D5A3D4180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/342a2e39-c722-3e51-a1b9-586af4c457e3.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:92:e2:6f:48:90:ef:1d:5a:3d:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=7b3ae6eb-2665-46b3-8b24-3b89dd269820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:be:24:b1:2f:9c:b2:8b:7b:37:47:fc:95:
eb:02:fd:97:b6:e4:d6:df:05:b6:25:e1:3a:c7:83:
16:17:0b:fa:d2:8f:1e:6d:14:08:85:b4:a9:89:80:
26:98:69:3f:05:3e:95:bd:de:9d:e3:ac:eb:03:f8:
61:95:86:68:70:7b:85:8e:13:cd:ec:9f:c1:e9:84:
6e:f1:8e:55:1d:a2:94:25:b0:fd:26:53:ff:05:a0:
38:db:a0:03:aa:39:67:8a:24:18:72:14:25:4c:cf:
c5:25:e4:2a:7f:fd:34:74:d0:b1:09:94:ab:be:28:
29:3b:32:8a:ea:93:0a:70:bc:75:18:d3:80:e6:7a:
be:db:c9:4a:a5:77:2a:af:fb:df:9b:89:df:46:e2:
39:5f:86:55:d3:f9:aa:c5:78:05:e9:9c:47:d9:ff:
23:a4:5b:37:7b:dc:29:b0:1b:12:a0:a7:0b:c1:db:
ab:7a:a5:2f:9e:e7:94:b9:7f:fe:97:20:e0:04:29:
a4:f3:31:e2:f3:16:f7:21:f4:61:58:be:5b:fa:57:
03:ec:5e:f6:48:ac:44:d4:64:b3:71:55:82:c7:c0:
be:a5:0c:b2:7b:bb:ad:8a:71:b1:9f:9e:11:59:29:
3d:8b:0b:15:0f:fe:c7:cd:fe:c9:ad:ad:4b:46:91:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:40:02:5F:F6:F3:97:A0:0B:CD:AC:A4:92:A2:0C:60:CF:74:CB:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/342a2e39-c722-3e51-a1b9-586af4c457e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:84:c8:06:d0:07:85:60:3e:64:bb:67:2f:7e:60:5e:36:e3:
48:fe:3f:9c:aa:d0:bb:68:f4:9f:17:72:71:ba:32:b6:d3:cb:
62:21:a1:ad:2c:31:45:91:fb:e9:c8:8d:9b:12:14:36:cc:a5:
97:84:86:2b:d4:2b:4f:ed:cd:ac:2c:fa:09:64:18:1a:e7:0a:
5a:92:be:de:75:c8:57:f2:85:6d:2b:43:ba:8c:5f:4f:ed:77:
9b:a3:41:99:ca:2e:ab:76:af:58:5c:54:d7:bd:4d:40:37:ae:
43:bf:65:8a:bf:5a:9c:f9:72:c8:39:9b:99:69:d7:a4:e3:c2:
fb:16:80:a0:9c:ad:60:c8:e0:28:35:43:02:69:18:19:bd:c6:
83:3e:43:34:fb:17:ec:c4:a6:eb:bd:70:82:b3:98:0f:19:da:
4b:c3:5c:67:e9:fb:fa:0a:ed:89:37:66:ff:b5:6a:48:71:19:
58:74:66:23:66:b7:10:31:20:fb:1a:5b:75:09:71:a8:26:8e:
33:5e:45:40:be:e1:b7:18:cb:1e:eb:90:8b:e8:7b:1e:18:b0:
ea:60:30:ed:7e:a7:df:02:40:e4:bd:ca:97:6b:49:b3:2e:d4:
b9:f6:c9:a5:01:9c:73:02:25:59:7f:32:cd:24:bf:de:f5:03:
f6:cc:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:50 2025 by rpki-client