Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c19b598-3faf-3e48-8d0b-2b6bc2da2269.roa
File: 4c19b598-3faf-3e48-8d0b-2b6bc2da2269.roa (raw, json)
Hash identifier: jAbkMxfYbLcPRGr8Rhr+eq1ZCHDQoYPNvwvOuhzfNKc=
Subject key identifier: F6:E5:C4:3B:AE:A7:80:B3:67:47:DB:0A:06:52:50:9B:4F:AD:43:5A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F1EC55C9D25AF8AF0D08B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c19b598-3faf-3e48-8d0b-2b6bc2da2269.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:1e:c5:5c:9d:25:af:8a:f0:d0:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=740022ec-b20e-42a4-958e-38d2363be079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:1b:14:6c:0e:6a:d1:be:3a:3d:a4:9e:fc:
3c:74:28:13:1e:9f:4c:8a:18:76:19:2b:c1:93:5e:
5b:d4:46:01:4c:d4:b6:14:2b:0e:2d:00:b4:16:dd:
dd:f3:ec:ad:7f:9f:4d:f5:3f:ee:7b:b3:a5:c0:9f:
0d:1e:92:e6:12:06:ab:ca:07:7a:2f:f9:76:3f:eb:
79:df:bb:ed:87:77:0a:45:99:20:f7:cc:7d:37:e6:
e2:83:e4:0e:58:98:39:d4:64:96:86:4d:5b:d6:7a:
f4:41:ce:30:27:5e:35:6f:c7:76:08:56:31:d4:1c:
76:6c:b1:86:1e:a2:e5:e8:3d:67:00:84:1a:d1:bd:
0f:75:7a:04:c8:ca:b0:7f:12:0a:a5:be:6f:18:fb:
ec:68:26:b1:55:12:9d:1b:90:4f:8a:b4:68:38:30:
43:63:63:a5:a1:4c:d1:76:0a:d7:23:91:a8:1a:76:
31:1b:b6:47:9d:3b:c8:53:89:75:9b:69:fd:c4:5a:
25:fd:99:11:63:b4:cd:a0:a1:7b:ad:32:9a:02:c7:
aa:6e:ab:9d:23:83:63:32:88:d8:56:de:cf:2f:c7:
38:35:28:60:19:2f:90:6c:28:5d:74:f5:3c:6c:f0:
9f:42:d4:41:5c:55:0d:11:02:3f:13:6d:00:8c:88:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E5:C4:3B:AE:A7:80:B3:67:47:DB:0A:06:52:50:9B:4F:AD:43:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c19b598-3faf-3e48-8d0b-2b6bc2da2269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:44:c2:4e:1d:f3:6a:c7:5f:d5:ee:85:eb:16:af:09:52:6c:
1c:cc:73:ee:0f:0a:30:1b:34:32:69:96:10:a9:6f:62:57:f3:
70:39:4d:b3:41:fc:9b:41:57:4a:1b:22:3d:9e:aa:02:e0:e0:
65:60:a7:33:cd:c0:7c:41:e8:e7:32:37:9e:22:c4:f2:67:4b:
2a:1f:d1:b6:d4:33:b2:84:7f:dc:d1:1e:43:1f:b6:c0:b8:81:
aa:63:74:45:cc:e3:e4:ea:5f:95:22:08:cb:9b:fc:8e:17:f2:
7b:70:a6:f7:89:ed:bc:b1:43:df:98:ae:55:f7:05:d5:37:bc:
2f:94:39:bf:44:c5:93:77:89:d6:71:e0:13:e0:3e:67:1e:19:
6f:34:aa:36:d1:37:0e:d4:37:d4:66:14:20:23:7d:56:13:03:
22:34:a1:66:4f:7e:07:4e:4b:7a:5c:1e:8f:6a:b4:95:13:63:
3a:8a:6c:5e:f4:31:5b:a9:86:e4:fb:77:44:b2:32:64:e2:a1:
4b:75:30:8e:0e:27:83:da:de:aa:62:c0:e7:92:9e:9e:4c:71:
e3:ca:c8:a5:64:49:23:5e:79:e1:61:6a:85:a0:b0:9d:ab:0f:
dd:48:ef:ab:58:03:aa:20:7a:52:e2:d9:8c:35:6e:7e:f5:9b:
e8:83:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:30 2025 by rpki-client