Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37c57aa6-7960-3290-a05f-78fef16fe030.roa
File: 37c57aa6-7960-3290-a05f-78fef16fe030.roa (raw, json)
Hash identifier: bq3+kVzLVcdEe/CzlkHvHhn1tAHwtVqVlQRmibIBJTc=
Subject key identifier: 84:9C:F3:46:C4:CC:F3:E7:D0:8C:A3:C5:34:17:AC:16:00:A7:0F:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5ABB3EAB1E2E8221569C8100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37c57aa6-7960-3290-a05f-78fef16fe030.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:bb:3e:ab:1e:2e:82:21:56:9c:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=c85e6431-cb87-4065-8eaa-4c852726dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:db:2f:aa:79:82:08:b2:35:e2:64:93:bf:
63:7a:e3:35:4e:44:e3:09:7f:7c:aa:f8:de:df:eb:
48:31:4e:e5:27:cf:e1:7b:25:e0:2f:ff:d9:7c:9f:
d9:89:5a:87:fc:ee:89:ff:3c:9e:56:45:bb:66:7e:
c4:d7:eb:a1:99:a4:e2:71:66:a7:cd:dc:ac:bf:47:
22:ce:b2:1e:e1:0f:2a:95:29:37:1a:b9:c1:f8:5a:
62:e0:8a:32:2f:4c:1e:63:d0:cb:2c:00:e2:5a:7a:
d9:41:0a:54:fe:c7:48:93:9d:82:a7:4b:b3:d3:ea:
dd:f2:46:8a:b6:7c:8d:e8:6b:15:cd:7f:53:8a:a4:
75:13:ca:6b:10:e9:91:5b:07:ee:d2:04:5d:6d:de:
b5:2e:0f:09:58:6e:b3:e1:93:21:5f:1a:51:76:35:
04:0c:ec:a2:6c:78:6e:e2:36:ea:3c:d7:47:6a:10:
67:6f:3e:b4:31:a0:68:a4:f4:db:db:47:66:ab:9e:
28:9d:c5:9c:8f:08:bb:4c:bc:d0:b0:91:27:66:7a:
96:8e:b2:eb:4a:5d:8a:44:61:94:7e:2d:9b:ea:63:
4b:a0:bf:08:db:66:01:db:98:ea:0a:ad:33:f2:82:
12:95:f9:e3:b2:a3:0e:c4:ad:6c:bb:18:ce:c3:42:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:F3:46:C4:CC:F3:E7:D0:8C:A3:C5:34:17:AC:16:00:A7:0F:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37c57aa6-7960-3290-a05f-78fef16fe030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:be:e4:cf:6a:af:c2:40:ec:8b:b7:eb:75:ae:24:47:b2:79:
60:8f:6b:c5:ec:44:33:41:6a:24:90:28:51:88:27:f6:59:d5:
2a:97:a4:b7:a8:8e:29:32:b1:ff:7d:9b:f1:40:a0:9e:a4:24:
f9:6b:0d:93:b4:f6:f0:4c:36:dd:3a:86:a6:f3:c0:a7:3a:e7:
ea:e7:32:72:70:05:f3:0f:c3:2e:ff:5f:02:4a:44:c6:d6:f0:
33:0c:fd:77:9e:18:7d:30:ec:34:c4:b8:53:d3:05:bd:ca:32:
83:ff:b5:51:da:28:97:d0:92:4d:8f:37:b3:a1:6f:4f:a4:61:
5f:f5:89:b7:e5:08:03:d2:6e:31:d3:8d:a6:c7:11:15:f2:34:
1d:0d:c3:c7:ec:19:66:39:3c:44:14:19:f9:1b:ca:a1:73:87:
d6:5f:2e:5e:24:e3:ea:46:df:ad:5e:05:cd:0a:53:3a:ce:2d:
34:7d:8d:10:cf:12:52:ef:14:a4:2f:b8:74:d3:fe:09:41:73:
d0:be:40:ea:29:0e:2b:48:14:c2:0c:8a:cb:40:47:66:c7:f9:
c8:77:fc:f5:0e:1d:7b:1b:e5:e8:02:38:97:82:5a:06:ce:50:
67:e5:75:7c:86:87:af:42:9e:6d:c0:1c:d3:4a:fb:d1:59:82:
62:6e:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:25 2025 by rpki-client