Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/587eff0e-924b-3f93-8c2c-3442eb7e3352.roa
File: 587eff0e-924b-3f93-8c2c-3442eb7e3352.roa (raw, json)
Hash identifier: eJG24toNICDolgjhmNK8YqYVRydEuLs7UsCT97328bY=
Subject key identifier: 99:78:CB:80:CE:44:34:3A:35:11:9A:B2:17:96:2B:79:81:B4:B1:19
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F1EBF08CCD6F5AD921950C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/587eff0e-924b-3f93-8c2c-3442eb7e3352.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:1e:bf:08:cc:d6:f5:ad:92:19:50:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=89434fae-525f-44bc-858d-d5b9f0d960cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:68:f1:9f:94:5c:71:29:ec:07:c8:f1:03:
ce:e5:a4:ed:0c:11:74:88:11:8d:c4:d8:5d:fc:8b:
92:f2:68:51:7e:71:e4:93:7c:c2:83:bf:d6:76:40:
23:e1:a4:53:68:34:0a:74:72:b9:7e:9d:9f:6b:7a:
10:bc:6b:f4:bb:7b:e3:6c:94:ce:c2:68:c0:f0:ab:
39:c2:4e:3a:7a:b3:5e:98:64:8f:ff:ba:ca:2e:2a:
6a:ce:1f:95:ac:3f:78:0b:d5:33:06:c7:32:2d:2d:
1d:45:b2:fe:98:3c:92:97:92:3a:89:92:ca:be:df:
2f:cd:40:cd:96:25:84:14:9d:2b:c5:85:26:a4:7c:
84:5b:de:68:e8:29:e9:53:70:99:e4:2d:70:4e:e1:
a7:06:22:6a:cb:b9:46:6a:31:9c:d2:6a:ae:81:4d:
ce:cd:e6:b1:fa:76:05:df:66:f2:ea:56:f4:d5:c2:
e4:04:d8:84:0c:1b:ea:dc:c9:f3:f5:b3:a5:6f:ce:
8c:cd:ca:71:d3:45:ab:71:cd:a1:8c:36:78:3c:9e:
ed:4b:29:05:1a:20:9b:7d:43:6e:d2:29:14:e5:91:
b9:26:93:cf:ab:3b:4e:02:e1:cd:95:13:30:10:88:
d5:85:9b:7f:af:67:28:55:f4:b5:94:cf:15:ac:0c:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:CB:80:CE:44:34:3A:35:11:9A:B2:17:96:2B:79:81:B4:B1:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/587eff0e-924b-3f93-8c2c-3442eb7e3352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:b3:6b:5a:de:18:4d:16:05:a4:ee:6f:aa:a1:64:cc:9a:e9:
90:c3:d7:8c:62:84:1b:2e:13:88:8e:e2:07:3d:83:d5:26:b2:
63:75:6f:c5:6e:e0:03:94:c7:3e:f7:fd:a7:7a:29:e2:72:3d:
21:8b:1a:de:a9:d0:b7:32:50:db:b5:4d:a8:c3:de:42:9e:0d:
5e:28:1e:4c:0b:40:65:33:38:32:4e:98:8f:d2:5f:2a:38:cd:
96:54:54:9c:38:d7:80:0d:51:f4:3d:72:02:cf:4e:7c:0e:63:
70:af:7e:20:4d:c5:35:2b:d3:e8:f2:51:b2:9a:8d:2d:21:79:
02:18:a7:f8:ae:1d:53:74:20:a8:d2:5c:65:79:ba:ab:d4:a4:
6b:b9:8d:4a:63:16:67:bd:a5:43:1d:d4:f2:9a:f1:e3:49:5b:
ea:6b:c7:70:40:59:aa:a7:df:62:b2:b1:3f:a0:b5:dd:b8:48:
54:c9:1e:95:0d:92:56:5c:1e:52:ed:28:47:04:0e:e9:c6:db:
21:53:24:3c:90:38:ac:6f:ce:42:1f:53:9e:96:f9:59:c4:63:
94:26:42:ce:e0:eb:8f:50:63:e6:ec:ec:e5:80:65:d7:5e:aa:
f4:e3:ac:f5:94:cd:ef:60:84:33:78:f0:e0:84:25:dd:1c:dd:
54:85:59:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:09 2025 by rpki-client