Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b68411b3-af19-3741-873d-dd45d4cd32e5.roa
File: b68411b3-af19-3741-873d-dd45d4cd32e5.roa (raw, json)
Hash identifier: AjoBoWvBzjIVrsrLw2/YK6QnIzGeLOqke0IcUUNhDCM=
Subject key identifier: 42:79:3E:1C:CD:65:5C:C2:B7:7B:D8:20:0C:21:66:51:84:FD:82:15
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F32E926BAFE614564DA376D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b68411b3-af19-3741-873d-dd45d4cd32e5.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:e9:26:ba:fe:61:45:64:da:37:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=016ef029-f5be-4bda-8fa4-72b8f28e0d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:08:7e:44:6f:71:66:ef:d7:e9:c8:e9:85:
84:d3:5b:75:99:4b:9c:25:a3:9c:bf:69:4a:8d:f3:
3f:aa:5e:ca:d2:c1:84:3d:e0:26:d0:02:12:11:98:
c1:37:32:90:41:fc:ec:4d:ae:ec:37:2e:bc:d2:55:
c8:a2:7d:70:47:78:e9:f7:09:3f:36:3a:87:8d:f1:
11:fb:64:08:63:0c:97:9a:05:17:7d:aa:d5:81:68:
a0:4b:36:25:33:9a:4a:80:49:5c:e0:58:83:d3:2a:
30:59:f8:4a:8c:86:af:0a:29:c5:da:56:5b:74:db:
95:69:38:02:6f:f2:0c:58:65:81:75:08:40:c6:d7:
9d:ac:06:b3:27:69:57:52:06:80:33:bc:a1:22:04:
b5:c0:dd:ba:9c:74:46:e2:de:f0:e3:94:6c:c8:d6:
1d:0b:f0:90:1d:44:87:2a:2e:b6:56:ab:ce:f7:4b:
0a:b3:48:06:ec:ef:20:a7:4c:6d:52:a9:94:13:1c:
b2:90:c8:4a:bb:9d:cf:ee:5e:a1:17:f0:17:15:b3:
08:a0:16:bd:83:44:d4:76:b1:c2:ad:50:76:41:94:
4f:1a:9b:07:e6:37:f1:91:ac:6d:e1:23:8d:7a:c6:
99:54:c0:0b:06:7f:ae:a7:04:cd:fe:7c:2e:81:f8:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:3E:1C:CD:65:5C:C2:B7:7B:D8:20:0C:21:66:51:84:FD:82:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b68411b3-af19-3741-873d-dd45d4cd32e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c1:e0:32:d9:33:2f:75:30:01:1d:eb:5c:f4:9d:95:8f:27:
93:81:9b:19:65:98:6c:fb:43:85:0a:a1:9b:63:c3:81:6c:4a:
aa:70:ba:7b:9b:a0:e1:e7:8b:ee:92:43:2c:1e:4f:f5:49:c7:
1e:68:8d:e7:bf:07:37:dc:d9:a4:a5:62:c0:f7:12:da:ac:9a:
a4:1a:64:25:39:30:bc:f6:67:e5:12:97:d1:bb:40:08:e3:6f:
11:95:5e:5d:59:4e:09:1e:fc:21:23:1a:cc:95:06:08:78:bc:
3a:e4:07:79:c8:03:c3:0f:69:5b:61:3b:2d:d5:81:35:ca:39:
27:75:dc:9a:2c:f4:04:68:e0:e4:fe:c2:07:ee:ba:6f:10:4c:
0f:04:44:3a:e9:a8:ed:74:5e:b4:0a:7e:00:80:43:b6:ed:c6:
55:d3:83:ff:52:51:3b:9b:26:fc:c9:1e:c6:cd:94:3d:d0:f1:
aa:55:c7:76:cc:e8:66:40:cd:9c:e9:89:f1:3c:bc:47:b9:db:
f4:8c:1b:ff:8d:a2:d5:b4:82:ee:de:07:94:e2:3a:68:1c:11:
6d:22:42:dd:be:6f:52:4d:57:a3:2a:a0:db:1f:b2:b4:05:53:
f5:a8:54:0a:9c:b0:04:cf:61:8f:2d:e8:ae:24:8e:c0:b8:51:
b7:71:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:35 2025 by rpki-client