Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6476583f-a4b3-3995-9557-df0ed7b8eac3.roa
File: 6476583f-a4b3-3995-9557-df0ed7b8eac3.roa (raw, json)
Hash identifier: 4+pCvjJ7ekGG9DPZbpTds7YUoYZ0tvYhQrzya/zq6+M=
Subject key identifier: 8A:35:BD:1A:9F:67:03:40:3C:94:4F:E8:86:5C:16:1E:8D:4F:7C:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF86D613351593109F0476840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6476583f-a4b3-3995-9557-df0ed7b8eac3.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:6d:61:33:51:59:31:09:f0:47:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=767a8c25-8e6c-428e-a523-71016e4dce64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:ad:43:8f:aa:f4:11:d5:54:0f:ee:94:cd:
15:24:84:31:52:63:b7:3c:77:d6:e0:85:2e:d1:73:
5d:ee:53:db:58:ca:1a:28:2d:cf:06:c9:f7:0c:69:
48:e9:5d:d9:81:4b:63:2f:d1:b6:dd:a5:33:d5:e1:
89:9b:a0:02:e0:43:f6:40:60:27:b0:3a:00:7f:50:
48:61:3a:0b:cf:34:de:58:67:d4:53:8f:ad:76:a5:
70:9c:00:1b:07:07:88:85:54:4a:91:0b:40:97:75:
80:a8:3f:77:df:84:e9:3f:b2:95:13:83:c1:be:f7:
8b:af:39:d1:2b:e1:a2:1d:5a:c2:72:f8:43:10:2c:
2f:0c:90:4a:df:40:a9:00:f7:4d:c5:1d:e9:28:36:
cd:62:21:e7:6f:f3:de:27:38:7e:0d:0d:05:2d:95:
f5:33:13:e1:2b:0b:ca:3d:fb:21:23:f3:3f:5e:fa:
6c:21:9b:e9:fb:7d:c2:53:cb:bb:40:3b:c2:3a:ba:
d4:e0:64:73:7a:6e:cb:d3:4e:59:38:07:c9:7c:5f:
94:c6:56:77:87:89:e7:a1:69:8c:22:a2:71:06:87:
07:97:f0:c6:7d:4c:ec:88:6a:d9:1b:c6:34:da:3c:
3c:40:40:12:e8:91:4a:4b:d9:0e:e8:78:66:18:a4:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:35:BD:1A:9F:67:03:40:3C:94:4F:E8:86:5C:16:1E:8D:4F:7C:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6476583f-a4b3-3995-9557-df0ed7b8eac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ea:8f:3a:60:34:e3:a2:68:ff:16:c5:ad:bb:21:0c:4c:89:
52:d3:59:2c:e6:c2:20:49:90:bd:f6:6a:63:a5:77:74:0b:48:
59:7e:ad:5b:1b:67:5b:49:ed:9b:de:12:d9:26:62:52:0e:11:
17:c2:3d:5b:9d:7e:58:a6:43:d6:3e:45:ff:69:2e:37:1f:72:
36:8e:cc:22:32:52:d6:ac:ed:6e:e6:c2:f1:b8:f7:3e:0b:c7:
07:47:32:c8:4c:fa:3c:26:cd:5a:d3:7b:22:34:b9:b9:9e:06:
66:57:be:1e:46:fd:25:4d:12:7f:b7:2c:85:0e:4f:45:03:1b:
84:09:a3:85:57:c0:89:23:a2:9e:30:e5:9e:21:ed:dd:52:a7:
7a:35:8b:90:c7:be:5a:52:e2:ec:79:c8:c7:2d:d5:0b:a1:04:
3a:b1:f4:e4:d1:47:dd:b4:c6:71:91:43:b6:07:8d:28:13:91:
0e:d0:75:00:76:8a:fc:e8:b8:1c:4d:6d:77:b1:9f:7d:fb:cf:
e1:47:26:0e:8a:b9:7c:f7:19:17:f7:db:dc:91:ce:7e:fb:c7:
12:41:5f:3e:c5:45:a4:11:6d:0f:a1:25:1d:08:3a:a2:ac:02:
8c:a1:a7:57:a8:61:ee:bc:81:35:6e:39:f2:b4:0a:90:3e:f2:
8b:67:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:35 2025 by rpki-client