Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9be0cde8-b5f0-3349-850f-5a58967512da.roa
File: 9be0cde8-b5f0-3349-850f-5a58967512da.roa (raw, json)
Hash identifier: Tmu4qddeIRl25F9fuNmQgNatoGIDkLSxLV/HLs9r9rw=
Subject key identifier: 9E:66:8A:ED:18:57:10:73:AC:F7:59:46:75:11:E1:4B:83:32:FC:96
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE475D65C4703E7881F028438
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9be0cde8-b5f0-3349-850f-5a58967512da.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:75:d6:5c:47:03:e7:88:1f:02:84:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=79c5e878-c68a-405e-b9ce-6b882ab400ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:4d:6c:1a:96:a4:97:e2:70:ae:b9:66:c5:
aa:ba:e1:fc:46:9b:53:ed:cd:56:3a:f1:20:26:e9:
83:c5:be:a9:d2:0d:ed:85:fa:80:98:f6:61:e8:c0:
2f:1a:d4:37:7f:42:c1:81:05:71:51:a8:c5:f6:8a:
04:60:70:8a:7b:7c:d8:a6:d8:88:c4:b9:7c:c2:63:
04:c1:9f:af:6c:1c:54:68:d4:5e:62:54:9a:47:d3:
ce:24:e3:af:d0:ec:de:fa:ef:fe:53:f6:5e:c3:76:
be:d0:86:9e:6a:27:c6:b5:70:e8:33:63:84:12:e2:
ef:6b:96:19:df:ef:cc:8b:f9:e9:14:c4:46:4a:16:
5d:a0:a1:06:0f:5b:e4:80:ba:df:55:e1:55:80:32:
7d:37:d0:2b:1c:ed:cc:66:16:d8:80:9a:6c:41:b6:
bc:89:85:7a:b4:45:22:80:98:cb:01:e6:25:0d:e6:
4e:59:5e:c1:71:0b:1b:a4:5e:59:bd:48:71:db:85:
49:4c:51:a0:a2:90:02:b3:fa:19:31:13:58:da:61:
db:26:26:4f:2a:2c:31:84:bc:16:dd:84:35:19:73:
a3:d4:ce:34:d3:38:fe:96:05:43:10:92:aa:ec:5c:
44:b9:d6:98:81:95:47:1d:be:03:e3:4c:13:25:6f:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:8A:ED:18:57:10:73:AC:F7:59:46:75:11:E1:4B:83:32:FC:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9be0cde8-b5f0-3349-850f-5a58967512da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:57:43:8c:55:ba:0b:51:0c:8a:71:b0:ae:38:4c:96:5d:f3:
4e:bc:a8:e2:c4:87:f6:cf:cc:a9:a3:79:8f:b5:62:2d:7d:91:
a8:bf:18:6d:5d:04:94:a3:2d:bb:f9:43:1c:b6:97:60:55:06:
29:f3:4e:22:9a:96:17:c9:df:83:15:c4:16:86:d8:8b:e2:4f:
4e:87:f6:cf:aa:8d:2f:d4:70:e4:c8:10:b6:8b:ab:23:55:a3:
e4:62:ff:14:11:af:54:e7:35:72:29:37:b7:db:5b:37:14:1e:
f6:ce:a6:a1:86:a3:85:18:b8:47:31:5a:3a:b8:16:86:87:1b:
59:65:0f:6c:24:57:d4:5f:a0:22:f6:52:d1:13:10:0c:2d:c2:
49:70:30:5c:67:48:47:fe:65:cc:d5:58:7c:ee:9a:be:97:af:
df:ee:d8:6e:13:b2:27:05:38:87:68:4b:d0:b2:4d:1a:37:7b:
58:f9:36:9e:8b:a7:52:79:c4:ef:3d:e5:53:df:b5:a9:9c:c5:
d3:03:89:f0:ce:95:0f:e2:ff:36:a4:31:a8:15:c3:de:4a:bb:
22:d8:7a:32:87:20:5e:b0:e5:77:d8:3b:76:08:fa:06:5e:28:
c8:df:10:1e:36:bd:51:3a:5e:f2:a4:2f:7a:88:2d:f2:83:b8:
66:14:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:06 2025 by rpki-client