Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/686f2a28-db29-3fd6-a422-d4ff944e1428.roa
File: 686f2a28-db29-3fd6-a422-d4ff944e1428.roa (raw, json)
Hash identifier: HK8NNPRUuKxLXna3yzUdObHM2GuOIqKEZLl3wXwz+wU=
Subject key identifier: E9:57:3C:9E:11:30:A6:95:CB:BE:53:0A:43:45:05:6C:E6:1C:70:51
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C972A0CD424DA00B4ED1A8DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/686f2a28-db29-3fd6-a422-d4ff944e1428.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:2a:0c:d4:24:da:00:b4:ed:1a:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=29fedf43-6c19-4066-90a6-500c26bf28db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:99:f6:bd:ce:99:53:84:fb:ff:ea:ed:43:
ee:a2:14:30:a5:92:df:11:89:b8:78:e2:26:79:49:
a6:c9:5d:e6:8e:f5:38:10:19:84:a4:a0:5d:07:0f:
85:82:f7:d9:cd:c2:2a:fb:a2:9d:b7:cc:47:59:e9:
1f:39:a1:dc:26:cf:a8:55:4d:eb:a6:62:a5:f2:98:
80:10:d0:b5:e1:22:92:88:1d:81:69:03:b5:25:b2:
db:59:c7:68:e7:c2:f2:3a:4b:2a:6a:77:74:8b:58:
7e:ee:35:de:3f:e0:cc:04:4a:16:2b:9c:ed:91:b0:
dc:96:a7:9b:87:69:9a:61:ee:27:25:8a:01:cb:cf:
5f:d9:99:a1:a0:c2:b8:85:b9:bc:46:46:c6:34:61:
23:db:d1:49:1a:1b:ae:43:70:94:c1:6c:db:2c:63:
b1:8f:12:74:76:31:3c:87:0b:af:7e:ff:dc:76:6f:
a7:d8:d3:1b:90:56:96:88:12:a1:d0:30:5d:a2:62:
88:1c:dd:7b:1b:b9:b9:09:70:b2:14:d9:30:39:7b:
f2:bb:25:0c:d3:96:dc:59:91:74:7a:e9:d8:54:ce:
c0:8e:08:c3:d8:66:e7:0f:67:a1:37:4a:c6:3a:dd:
bc:43:5b:45:8b:5e:8f:05:8b:e4:88:af:a3:65:64:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:3C:9E:11:30:A6:95:CB:BE:53:0A:43:45:05:6C:E6:1C:70:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/686f2a28-db29-3fd6-a422-d4ff944e1428.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:66:38:42:c0:ff:c2:18:3f:8c:d9:cd:75:24:46:70:0b:30:
72:88:a7:80:02:11:0a:77:f3:0b:f3:89:a3:54:59:66:a4:a5:
e9:5e:e5:46:99:68:e0:a3:e1:55:14:95:79:ed:1d:e2:82:df:
76:9a:1d:18:91:2d:be:8a:9d:84:7a:1a:96:f4:73:85:c4:e7:
18:78:65:d6:1f:d2:f7:a4:a2:08:dd:4e:9a:9e:84:21:af:19:
45:88:35:2e:e8:9f:32:d5:83:da:97:0d:d6:0b:62:30:d4:fe:
b8:f8:25:d2:ea:b8:06:8d:59:d9:86:d0:7a:78:a4:bd:7a:a4:
b7:89:66:21:65:7e:d9:b8:ff:9a:b2:e3:46:b8:72:f3:88:30:
54:04:c5:21:2f:38:9c:77:06:b5:fa:4f:66:2e:66:39:bb:01:
a5:1c:13:ec:28:3d:f9:bc:05:7a:b0:70:f5:ae:7f:1f:c5:b5:
89:ff:82:54:5b:c4:0d:a6:86:c1:70:8e:8a:5e:b7:f7:59:62:
a8:ec:7c:3d:18:bb:bf:b7:fc:c4:8f:b8:6b:85:88:77:18:07:
ca:26:93:f2:a0:0a:6d:be:d4:c1:e9:93:ba:5d:e9:e5:09:6b:
e9:26:53:f4:29:30:fc:ad:9a:d8:dd:6b:ce:62:62:3c:33:c8:
c6:9c:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:59:59 2025 by rpki-client