Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8286f9f6-5876-3f3f-88e4-e3b2db639f3d.roa
File: 8286f9f6-5876-3f3f-88e4-e3b2db639f3d.roa (raw, json)
Hash identifier: 5zEvMRBn4XxPZf1+qa3OPqmflpve57JtOYFd5lZJ9nY=
Subject key identifier: C0:CA:02:B6:5F:20:37:AF:7B:F8:5C:9D:EA:70:D3:22:C9:CC:EA:47
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584046D47ADC32E499E6D4519C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8286f9f6-5876-3f3f-88e4-e3b2db639f3d.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:d4:7a:dc:32:e4:99:e6:d4:51:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=ec22e290-9ee5-44d7-83dd-604db3cf3140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:2b:cf:f8:55:77:d9:cc:03:23:5e:e4:de:
20:ba:c5:bf:35:e5:e5:d0:ac:14:b9:56:c0:cb:87:
32:3c:85:3d:17:6b:f1:22:a4:21:07:fe:44:8d:6f:
ae:42:92:38:cf:b3:60:74:db:fa:eb:b8:86:90:25:
a2:19:01:10:ac:53:81:f7:7f:30:c4:a0:48:ac:bf:
e8:9a:50:a6:47:e0:f3:3a:7c:5a:4e:35:15:ba:93:
81:97:6c:f7:39:b8:74:c8:93:cc:b1:27:12:84:c5:
6d:40:bd:be:79:14:6b:b8:f7:48:0d:5c:07:9f:c4:
22:a4:b7:94:01:7a:87:34:f1:b3:a7:8d:ed:7f:c7:
f1:b8:f5:27:2a:5c:dc:23:bf:a1:8d:4f:f5:f1:59:
de:d8:82:dc:83:b9:8c:7d:92:9f:bd:b8:9f:6a:83:
6f:80:c8:d3:f1:c6:2c:9c:03:66:d2:71:1a:b8:f8:
56:2b:e3:e6:e7:24:fd:c2:5a:21:59:f3:86:80:24:
e9:38:da:07:bd:03:f8:af:60:ed:ea:76:43:88:f7:
16:c8:59:b2:9d:bf:70:f7:34:ec:22:5a:83:ae:60:
44:87:d5:5e:69:1d:14:4f:6d:57:9e:31:ac:50:08:
ee:36:8b:eb:fd:40:a7:40:aa:b3:6c:77:d9:2f:87:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CA:02:B6:5F:20:37:AF:7B:F8:5C:9D:EA:70:D3:22:C9:CC:EA:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8286f9f6-5876-3f3f-88e4-e3b2db639f3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:55:f3:10:73:2c:13:55:fd:a1:b9:cd:07:e8:db:31:5a:cd:
63:52:e3:76:62:91:c5:13:76:82:e2:b5:ea:f5:5f:38:3c:87:
57:53:ae:6a:32:c2:16:19:1e:70:38:15:55:b5:ee:81:6e:99:
ef:14:31:7e:fe:70:72:cf:d7:79:48:81:b9:44:53:6d:4c:20:
29:66:28:a1:a7:12:a7:09:8e:02:cf:38:0f:f5:ab:85:57:bd:
3f:53:87:22:ac:83:35:b2:1f:63:b1:0c:5a:0d:6c:39:c8:a5:
0a:45:30:ae:ba:97:86:b7:eb:3d:6c:80:b2:da:54:e3:ad:c8:
c2:00:e3:1d:39:df:96:46:4a:e5:32:3f:06:ab:7d:f3:0c:d1:
ea:33:9b:fd:45:9b:ff:53:03:98:39:6e:ca:3a:d3:57:4a:4a:
29:ab:6e:30:d6:8c:84:5f:49:a4:b5:87:b6:fd:9d:77:10:0a:
6d:ee:e1:ca:06:82:06:6f:9a:3b:7f:78:e7:66:dc:52:76:02:
0a:d2:1a:fa:23:88:f2:94:a0:e4:d5:e6:8b:c9:11:65:24:32:
4e:d3:e7:27:81:a8:90:d3:6c:8a:e3:14:9f:32:c3:01:08:c1:
35:d3:bf:24:84:01:1c:c8:ba:10:3c:d1:75:ad:75:82:6c:cb:
ce:33:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:21 2025 by rpki-client