Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d366543-6e1f-362c-8134-138d8c86f1f4.roa
File: 4d366543-6e1f-362c-8134-138d8c86f1f4.roa (raw, json)
Hash identifier: ibGZbsqXlu2Ss3yUeOJtqwwB+g0vyqhpY2yx3y3dVZM=
Subject key identifier: C5:54:F7:2B:E2:7F:87:39:4E:A7:C9:E0:F0:E3:29:DE:A5:12:BA:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E93B1DBA208DDCF496B5CF500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d366543-6e1f-362c-8134-138d8c86f1f4.roa
Signing time: Thu 14 Jul 2022 21:12:08 +0000
ROA not before: Thu 14 Jul 2022 21:12:08 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:b1:db:a2:08:dd:cf:49:6b:5c:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 14 21:12:08 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=af99cae2-b035-4ecd-94e0-3b59ef36fa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:ad:38:76:4c:5e:a0:a9:66:09:24:43:9c:
67:59:f9:ee:92:e6:b6:69:87:4d:1c:49:cb:b6:92:
0f:eb:a6:99:f4:8d:c4:27:c2:b3:6f:a3:9b:66:55:
11:78:5f:97:d2:5d:83:ec:f5:3b:39:ca:8b:dd:2b:
25:8a:e1:63:06:15:1f:64:0a:b5:04:bc:13:eb:80:
ba:af:cb:74:25:42:8a:98:ab:4f:c8:8a:ca:91:d2:
c4:21:9a:51:e9:55:fe:9a:ce:cc:19:55:87:7c:c8:
8f:50:41:43:95:e5:6a:53:f0:a5:c4:5d:28:01:d3:
4d:21:03:5d:a4:75:cb:cc:f5:06:aa:7c:7e:06:9b:
65:3d:fc:ee:a3:32:51:24:48:09:f3:7e:51:3f:c8:
ae:a7:a9:3b:f1:fe:7d:7f:4e:2a:53:46:05:7d:84:
97:55:e4:f9:51:f5:44:d6:38:87:12:40:95:18:e8:
b6:e7:ac:74:22:c5:54:5d:1c:a0:fc:15:40:3f:cf:
96:c7:15:9a:3b:cd:31:b4:0f:64:09:0c:59:68:ad:
6d:ab:85:98:81:f2:f2:3d:24:1e:eb:db:7e:ae:96:
fe:59:e4:cc:e9:1d:0b:3c:93:b0:80:f1:ea:a0:23:
11:4d:62:ac:6d:72:f7:25:32:d7:9a:64:75:6b:ef:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:F7:2B:E2:7F:87:39:4E:A7:C9:E0:F0:E3:29:DE:A5:12:BA:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4d366543-6e1f-362c-8134-138d8c86f1f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:0f:6c:39:49:00:d3:29:36:aa:09:b0:b0:65:af:b4:a3:06:
a4:0c:60:11:0e:30:a7:0c:e7:39:52:49:57:f0:a5:d5:18:9c:
95:78:2e:bc:31:37:e5:ad:f3:d8:1d:64:05:cb:bf:9e:1f:28:
0b:c5:91:46:6f:a6:4b:9e:58:5a:61:2b:72:7a:89:2b:05:1d:
d7:83:4d:14:5d:9f:ec:4c:d5:89:a7:06:67:d5:59:32:71:39:
81:1a:78:34:d9:18:a1:ca:80:1e:78:24:0a:f9:93:7f:09:ed:
5f:23:c3:81:d4:e6:f2:d9:0e:64:cc:04:29:fb:57:47:56:a1:
4b:99:ec:e6:33:ac:e2:99:6d:bc:b2:68:ed:e8:ed:78:05:bc:
e6:98:78:5d:fa:92:59:9d:36:9b:a6:d1:fa:5a:7d:45:4d:aa:
d7:38:5b:6a:49:4f:27:ae:4e:1e:ee:75:31:03:79:40:f9:45:
8d:65:bd:ea:2b:8c:56:09:5e:47:70:18:e4:98:28:36:45:ec:
e2:2e:f6:0e:21:cf:fc:3f:17:6f:ac:99:d0:03:84:6c:99:19:
18:83:87:15:ab:5e:71:f6:0d:ef:df:13:78:5a:85:3b:4f:96:
f9:0f:47:c3:14:2c:03:33:ab:44:79:5b:a1:6e:c3:82:29:ea:
25:96:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:17:20 2025 by rpki-client