Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cbd0298-2773-36ac-9f5e-0431b8d81c0a.roa
File: 5cbd0298-2773-36ac-9f5e-0431b8d81c0a.roa (raw, json)
Hash identifier: ju5XK7CFpzIG8y2JPRCuG7mAMqIkk5yLX5qoHoP/Bns=
Subject key identifier: A2:69:B8:D7:7E:42:F7:CE:EE:E2:58:2A:87:41:AF:88:B7:C5:3D:7B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE56445CB01F569CD0AE66D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cbd0298-2773-36ac-9f5e-0431b8d81c0a.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:64:45:cb:01:f5:69:cd:0a:e6:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=3ec5386c-e300-4b94-b73a-7a97d3216748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:b9:c1:23:9b:8f:37:7d:5f:be:11:04:bf:
f2:66:97:dd:57:da:cd:84:03:ca:e1:09:33:5d:73:
1b:f6:bb:82:38:74:7d:59:09:35:97:7a:55:c1:f5:
33:a1:c7:93:99:b1:0f:64:2c:a6:a6:59:71:55:19:
a1:e3:d6:99:2c:cc:7c:1f:b9:a6:9e:97:07:bb:14:
23:b7:8c:3f:af:92:18:aa:50:11:76:e4:25:d8:d0:
9e:56:ec:ef:72:45:bd:86:24:05:da:b1:59:ac:0a:
69:4e:18:75:aa:25:6f:c0:46:56:ee:aa:54:29:5d:
62:f5:cc:9c:75:ef:82:83:b8:74:59:eb:24:15:d6:
fc:1f:59:af:a3:b4:2a:62:c8:6b:a8:5c:10:b6:ce:
27:ed:74:05:d2:58:a3:a8:71:ff:19:78:ce:72:37:
c3:cc:c0:ff:4c:2c:a8:5a:79:cf:a3:a3:79:53:95:
c7:c6:67:0e:41:d3:70:5f:58:c3:2d:58:82:cd:1c:
d8:dc:11:39:60:dc:91:70:cd:f4:ce:a9:6f:bf:d9:
02:16:a9:2c:17:e7:e8:be:54:88:cc:5c:0b:22:6c:
1d:e0:3a:ec:97:c8:ab:85:74:7b:0a:62:06:34:51:
5b:e6:7e:c0:23:e5:67:60:27:dd:5e:31:1a:89:0e:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:B8:D7:7E:42:F7:CE:EE:E2:58:2A:87:41:AF:88:B7:C5:3D:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5cbd0298-2773-36ac-9f5e-0431b8d81c0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:98:ee:20:23:0f:ac:f1:43:4c:54:87:64:d0:d0:d8:f0:1f:
87:22:bc:a5:40:eb:2e:39:90:8c:ad:89:7a:80:59:d4:ce:c9:
b5:c3:17:91:32:5b:33:31:4d:31:d4:a1:62:75:69:9d:9e:00:
d6:1f:15:a2:ae:df:a2:c3:c7:13:c7:24:1a:b6:d7:18:fd:e4:
c1:dc:6a:b3:4e:ae:6d:47:6a:68:36:f5:79:a6:88:27:91:f9:
94:a3:76:2e:62:00:19:c8:37:04:03:2f:13:a9:f4:f1:91:6c:
5a:ac:8d:c3:e6:47:5e:a9:cc:f9:e6:ba:70:a3:9f:59:21:f3:
92:92:36:00:1c:b3:b6:da:91:c6:a9:0a:00:35:2d:2e:9c:dc:
c8:b0:99:87:85:62:26:69:02:89:94:8b:0e:43:8d:c6:c8:b2:
1a:b6:34:c8:07:ab:38:f4:66:57:3e:58:1c:6b:e9:b9:65:a4:
03:4a:f2:5a:47:99:e7:78:c3:b2:67:83:78:cb:aa:b5:a6:fa:
12:f7:2c:04:aa:57:ad:04:06:04:ec:5c:80:93:92:a4:eb:74:
d6:01:3a:29:a9:a2:c2:e1:2d:ab:25:ff:c0:0e:93:01:0a:86:
1c:b5:1f:9f:85:27:22:a4:7b:ae:1d:4d:b1:7a:f6:8d:67:e1:
35:2f:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:04 2025 by rpki-client