Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1697b1d-b70f-30b8-b0b4-06c438600123.roa
File: b1697b1d-b70f-30b8-b0b4-06c438600123.roa (raw, json)
Hash identifier: PRGT2DP77i+KH+x1SrigtYJAyAiD07lBb60dL3PDi2I=
Subject key identifier: EA:48:19:C6:97:6C:A0:8A:81:EA:9C:C1:BE:C6:C1:DA:B5:3D:81:05
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F32E93371C9A9AF8E85930180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1697b1d-b70f-30b8-b0b4-06c438600123.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:e9:33:71:c9:a9:af:8e:85:93:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=d7ecbd8b-711d-43a6-abd6-2289c395aa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:3d:73:25:6e:a0:04:26:f0:58:78:58:5c:
97:1c:4e:bb:ee:33:3f:21:7e:b0:e3:b2:23:cd:31:
3b:c1:a4:6c:eb:5c:21:7c:09:bc:d4:6b:ec:1e:28:
ab:94:9e:f9:41:e3:81:ab:07:8a:e2:66:ab:c6:7a:
fc:2f:b9:5e:bb:86:55:05:6d:13:36:db:09:e1:9f:
55:df:10:c3:7c:35:f3:19:fa:b5:3b:56:af:33:fa:
c6:88:9d:99:6b:69:c9:6a:64:1c:e0:a6:b0:3f:38:
8f:2f:31:84:6d:52:e1:b8:7d:25:d5:87:38:a4:50:
6d:f3:98:13:8f:6d:96:ba:6e:8b:54:79:10:a4:34:
c4:51:e8:19:d4:b6:14:eb:a4:87:03:e7:84:a3:8a:
67:75:62:e8:2e:1e:69:3d:7b:62:cf:db:58:b6:28:
95:3e:a3:a1:1c:35:83:13:8d:0d:26:d0:61:68:6c:
31:f8:22:8e:54:ff:24:00:23:f2:66:f8:40:bd:ef:
c1:68:92:76:36:9e:0b:41:fc:4d:33:c5:e1:1e:41:
0b:aa:1d:5f:a3:ea:3b:a8:c9:d9:d9:92:aa:c3:7b:
68:ab:56:f0:c4:4b:cd:ea:1f:3e:ea:bb:80:18:28:
b1:57:eb:78:8d:19:d3:38:57:bb:09:8e:7d:f5:ee:
30:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:19:C6:97:6C:A0:8A:81:EA:9C:C1:BE:C6:C1:DA:B5:3D:81:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1697b1d-b70f-30b8-b0b4-06c438600123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:c7:e7:26:2f:85:1d:4e:3e:09:f5:40:22:58:9e:ce:8b:7f:
1e:cd:01:de:ca:b2:e9:56:1f:49:10:94:83:ac:2c:be:37:84:
1e:d6:0b:0b:1e:ba:11:3a:36:cd:ea:8b:1c:fa:10:7c:0a:1d:
e6:fd:93:ef:59:e8:bb:cb:56:fe:ea:ab:02:fd:21:c4:b8:71:
c2:4c:c9:da:56:e6:e1:d5:06:78:ba:2e:07:fe:d5:0e:43:f4:
b4:87:3e:f6:5b:7a:b2:99:cc:52:15:3c:64:b3:77:9f:ed:51:
95:34:79:ff:45:13:98:f9:d4:60:d9:55:c1:4a:a3:5a:70:c5:
91:a5:0f:ff:0f:a3:52:e2:e1:d8:0a:80:6f:a7:13:af:61:59:
f9:37:d6:ef:41:54:9f:09:8e:6a:98:44:18:56:5f:47:07:b1:
8c:48:ea:1c:60:33:fb:8e:f6:6d:e1:d8:5c:9e:ba:e5:e3:e4:
28:e2:a6:ec:60:28:d3:3b:2a:85:ea:6d:88:53:69:5d:a3:ac:
f8:bf:49:bb:e4:68:12:b2:01:82:03:9f:db:61:4f:ab:ad:13:
ef:4e:84:72:99:2e:e5:53:e1:3b:d7:4f:3c:9c:11:32:4a:86:
4b:ca:49:f9:39:ca:2a:42:b3:dd:7a:65:fe:41:73:77:e4:04:
ca:41:95:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:09 2025 by rpki-client