Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85254210-b121-3cc7-951b-131d330a7b8a.roa
File: 85254210-b121-3cc7-951b-131d330a7b8a.roa (raw, json)
Hash identifier: 5FMr73DjJ221S8FAMAb6sclLUl8Vbw+Qnu89d3awNs4=
Subject key identifier: 1B:03:87:F4:56:7A:C5:91:D0:AB:21:3F:B4:F6:A2:7A:B8:4F:0C:FD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D80E9EE8BD0029443B8D0F700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85254210-b121-3cc7-951b-131d330a7b8a.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:e9:ee:8b:d0:02:94:43:b8:d0:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=b1b9a4f9-554f-4508-9c9c-b31814e3aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:24:a5:69:7a:2b:6e:db:4b:5d:62:3b:78:
d8:9f:db:66:62:f6:1d:1c:25:17:23:ff:1f:a8:ba:
a7:85:da:9a:20:c5:94:f8:0f:bf:8b:a1:c9:26:13:
3c:66:35:19:e3:e9:e3:86:b6:46:9e:26:24:92:c0:
9c:b9:68:b0:ad:ef:1d:2f:a2:3d:a2:c2:9d:ab:4a:
c4:99:d5:63:82:17:3b:e1:1f:b5:97:f5:32:eb:ca:
78:07:0c:ec:c0:8c:d4:ac:eb:a9:35:00:26:83:9e:
a0:0a:81:c1:6c:61:6e:b8:72:0f:2d:d7:c0:f8:68:
04:e3:dc:7a:17:19:44:b7:51:84:3c:75:c4:e3:c3:
ab:b6:5e:d6:43:f2:2f:d9:da:62:f3:70:02:96:d9:
9a:40:ea:f6:22:d1:55:65:f7:75:10:0b:07:bd:b4:
c5:29:d7:c0:aa:c4:1f:93:3d:ff:5f:0b:1d:1f:da:
98:5e:ae:b8:12:39:93:bf:e2:da:5d:c4:14:53:5d:
0c:50:ce:31:90:23:62:03:03:49:25:f4:05:7a:ab:
e5:ac:9f:c9:e9:d2:06:ec:8d:c3:0a:25:a1:5f:28:
c9:75:52:63:6f:8f:f1:7a:e4:06:98:ff:67:1c:26:
a9:d0:69:07:01:cc:6b:53:a1:4f:cb:df:a6:2d:d3:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:03:87:F4:56:7A:C5:91:D0:AB:21:3F:B4:F6:A2:7A:B8:4F:0C:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85254210-b121-3cc7-951b-131d330a7b8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:c9:9e:09:ce:d1:ef:f9:68:10:32:94:81:a1:f8:72:b8:69:
9f:9b:c6:f1:40:1c:0c:ea:48:bd:c6:31:5f:c1:1e:3a:3d:e1:
ae:ae:3a:43:71:ec:6c:18:81:6d:83:c1:9b:a9:ee:5e:62:08:
90:a9:d8:4d:5d:2c:5e:aa:c5:0f:a9:e2:b1:39:42:5b:4a:17:
a3:fb:3b:3b:27:db:82:ff:de:60:b2:91:55:b1:0c:ba:be:d5:
31:3b:b2:34:58:1f:a8:15:0e:22:a5:aa:dd:e4:ca:2b:d1:00:
89:bb:71:4e:58:4b:9d:70:2b:c9:52:b7:a3:8a:94:00:ee:27:
72:6e:fc:25:89:3b:b8:a4:e3:a4:a5:5a:53:81:1c:9b:3a:12:
37:db:62:4b:a5:5c:6c:72:b5:75:a8:07:90:9d:9e:a2:29:c7:
63:52:bc:23:ea:b1:a6:e9:5b:1e:64:09:90:e3:a8:e2:9f:82:
37:35:e0:ea:5b:bb:a2:e3:fc:96:d0:b9:eb:e9:fd:4d:b9:18:
c4:da:8a:85:b1:35:b2:3a:6b:4d:03:43:69:f4:2a:9a:88:79:
c9:7b:cc:be:a3:62:94:04:10:f0:a0:ab:0c:ff:a9:00:8d:7c:
be:85:94:ab:ad:8a:54:0e:b5:b8:53:a7:1f:9e:29:cd:ab:bd:
43:2a:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:39 2025 by rpki-client