Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49125c94-818a-37e7-a421-81504d99306a.roa
File: 49125c94-818a-37e7-a421-81504d99306a.roa (raw, json)
Hash identifier: f248V4atHvUqEi/upVjRZ+Pt/Ux3VjN6MavAVv6VPk4=
Subject key identifier: 38:63:89:79:37:27:81:3D:50:ED:79:7B:5F:50:A9:9A:E4:1E:84:07
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D32AFDB5DA50EB016F9281C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49125c94-818a-37e7-a421-81504d99306a.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:af:db:5d:a5:0e:b0:16:f9:28:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=de07e061-671d-4094-859e-75bac27c7a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:a7:b6:f4:61:f6:c2:42:14:f7:3b:90:f0:
48:40:1b:62:ae:a0:53:4a:ed:94:a5:6f:fc:11:bd:
ef:4b:34:8b:27:b1:18:84:4e:e6:8c:fe:b6:c5:12:
7e:79:1b:71:84:47:8a:98:ae:8e:85:f6:72:c6:bb:
e1:7b:5f:0a:c0:de:f9:9c:f1:4d:55:6d:1f:6e:dc:
1e:8c:80:67:4f:08:75:89:a2:7a:8d:e2:f6:80:c0:
a3:07:64:75:6c:4d:6f:bf:ec:14:10:6c:98:fe:c1:
bf:93:93:9e:5a:5d:aa:2a:63:b8:49:d9:68:d8:bb:
55:91:37:c6:c0:84:1f:f7:f6:28:8f:da:8d:6c:08:
c1:59:c1:97:d7:a1:51:f2:43:5a:b5:1b:eb:24:30:
20:df:1e:06:0d:7c:c8:f2:a5:24:f0:a8:a8:c2:13:
74:d9:c2:b3:b8:be:db:42:15:32:4d:cc:0d:a2:9c:
46:34:05:87:22:4d:71:9f:72:44:68:7e:3f:e6:27:
b8:4f:63:d9:f9:ba:32:7f:2d:a4:b8:ae:82:73:76:
96:4d:c7:65:93:12:c9:fa:f6:2f:7f:fc:05:0a:d8:
46:2a:35:4a:87:90:b1:95:be:e1:a3:78:8d:3a:e4:
ec:f9:96:25:9f:a5:16:2f:01:32:ab:f8:0a:e1:d5:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:89:79:37:27:81:3D:50:ED:79:7B:5F:50:A9:9A:E4:1E:84:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49125c94-818a-37e7-a421-81504d99306a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:cd:a4:71:2b:a7:b6:e8:d1:6e:98:37:73:be:bc:27:8f:6d:
60:1d:bc:eb:04:59:01:77:bf:97:e3:52:47:a6:5c:1f:87:df:
79:ce:55:37:57:07:78:80:13:07:26:29:08:28:df:45:18:b7:
88:ed:a6:ef:4e:73:91:36:0e:5e:79:d0:e7:51:ef:4e:23:17:
11:ed:41:fd:21:f4:25:59:a5:a4:0f:70:fa:86:e7:f0:28:87:
c6:64:d6:f7:c4:80:d0:9c:97:ec:f4:66:50:2d:cd:41:7e:00:
50:46:ff:11:4e:60:4a:ba:80:95:3d:c3:28:df:37:15:b3:d6:
96:1b:81:10:36:a1:d4:ba:5c:50:f4:b0:62:35:bf:3f:1a:a2:
4e:74:e7:89:e5:7b:98:0d:1e:73:b6:1b:0b:8e:d4:0f:b6:f1:
62:fa:10:ee:9a:8c:f8:fb:85:14:f9:18:46:6d:8f:a6:d6:72:
68:f6:80:a7:9d:34:1a:1d:b4:90:52:18:c9:d8:5c:da:0d:3b:
d2:ab:df:6d:7b:f9:a2:d9:a7:94:24:a8:82:be:fc:bf:c0:78:
d5:cd:1d:d1:51:ad:ae:24:42:54:fe:aa:08:a5:b3:6b:e4:99:
ed:7a:9d:ea:80:bc:ac:d2:11:5d:f8:d3:e0:08:81:5e:61:5e:
de:35:0c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:12 2025 by rpki-client