Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54ed125a-e4bc-349a-9afb-743b24564c5a.roa
File: 54ed125a-e4bc-349a-9afb-743b24564c5a.roa (raw, json)
Hash identifier: Ddq2ma+1A9kBA7LQtPMQFTAkBdTZjvYaphjdKuVP2UU=
Subject key identifier: FC:14:BA:1A:82:39:D4:ED:C4:86:43:E1:45:0C:78:B7:47:8D:4F:7E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401151B01B7EC0B1D1C2184180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54ed125a-e4bc-349a-9afb-743b24564c5a.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 20.142.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:11:51:b0:1b:7e:c0:b1:d1:c2:18:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=280f4ec3-fb1d-4de7-a6e8-8864938a72c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:70:87:86:11:ac:0d:47:b5:22:8b:6d:9e:
ff:50:ba:1c:c7:6f:9e:60:f2:1e:6e:21:69:ce:48:
2d:e9:98:56:e8:a4:bd:9c:03:ba:5b:db:b2:f1:67:
cf:34:2e:6f:c2:4b:a0:af:8d:66:58:c9:bb:c0:a3:
25:16:dd:9d:d3:59:66:76:bf:9f:ba:92:4f:ec:c9:
dd:49:b7:fa:d9:dd:a5:26:10:09:88:59:11:8c:78:
3f:5b:45:ae:65:11:10:0a:44:80:c2:14:39:ef:c3:
53:63:47:f0:db:c1:84:8d:22:77:1f:70:06:50:41:
a8:23:6c:c5:4d:56:ef:f3:88:91:85:2e:3e:4c:02:
68:98:6b:7e:9c:eb:d0:f4:05:18:34:2d:07:cd:f2:
2d:99:b7:8e:26:6a:fc:9d:b7:54:71:95:e2:2b:af:
4f:02:cd:7d:c2:e2:05:26:b7:0f:08:9a:7d:73:a4:
04:a1:bb:ea:cf:6a:39:57:83:3e:1f:aa:40:ed:26:
4f:64:26:47:3d:8d:9c:5c:26:84:34:09:65:26:2c:
62:24:34:27:2d:b2:10:4d:76:ac:73:f0:e2:52:d3:
a9:c8:f0:19:4f:c4:de:a0:f0:3d:e0:9d:c4:db:94:
0a:a8:a8:8d:21:3b:62:ff:22:a8:fa:e0:ee:3a:33:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:14:BA:1A:82:39:D4:ED:C4:86:43:E1:45:0C:78:B7:47:8D:4F:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54ed125a-e4bc-349a-9afb-743b24564c5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
20.142.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a0:59:e4:a6:07:53:d9:b8:50:b7:ad:f1:d3:04:cd:10:05:
e1:40:23:1b:9a:d6:28:a8:2c:82:ac:0f:62:83:1d:37:5b:87:
a1:5d:22:a6:b1:84:19:7a:81:5f:d7:fd:d0:cb:d4:e5:84:60:
05:13:2b:88:e0:b0:0d:b7:06:1f:7e:2c:eb:c0:a0:2e:99:ef:
61:67:bf:bc:4b:9f:a1:65:ef:ea:5f:32:25:7a:ff:3c:cf:e9:
16:bb:0d:af:51:7d:3f:ad:9f:c5:8d:30:a9:9e:26:fa:da:ba:
62:1e:29:b4:03:b9:f9:b8:68:45:64:e1:aa:56:63:e9:c8:36:
96:ba:5d:16:c9:fa:bb:36:85:45:be:5f:45:dc:09:af:f6:0d:
af:da:20:67:43:69:11:47:04:57:76:4d:cc:02:4e:e6:40:9a:
4a:42:0f:04:61:b3:db:a4:d4:37:71:d2:18:df:dd:30:0e:d0:
b2:91:5d:72:8a:e9:92:77:c7:e9:c0:45:fd:58:d1:fc:3b:9d:
21:cf:d2:9b:46:22:8e:dd:bf:41:5c:e2:6a:fb:47:c4:3c:71:
8a:72:6b:6d:6a:a5:b3:90:28:29:2b:b3:71:49:5f:37:a4:44:
b9:ce:41:83:4e:12:11:9f:bd:97:eb:5f:21:c9:76:9f:b2:73:
98:6a:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:36 2025 by rpki-client