Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd3a55ef-e19e-3be3-8487-cc9f8cc2ba77.roa
File: bd3a55ef-e19e-3be3-8487-cc9f8cc2ba77.roa (raw, json)
Hash identifier: NcdDTlCboWxxEpOacEnsiS9nqqBz2fh3OGDF/fkPwbg=
Subject key identifier: D8:BA:06:BB:8B:61:38:08:F2:28:E4:F7:E1:D8:D5:CF:8A:E9:89:A9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401BE783047DD8FB2397BDA180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd3a55ef-e19e-3be3-8487-cc9f8cc2ba77.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:e7:83:04:7d:d8:fb:23:97:bd:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=08d8d122-e5df-4149-b937-e25d0d4a2f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bb:2d:46:bc:da:65:71:46:98:0a:0e:f3:0d:
a4:41:35:d1:de:f4:53:98:51:55:71:d6:f8:d2:b8:
18:88:75:b5:65:a9:7a:83:00:92:d8:3e:85:d6:9c:
ab:67:09:4f:da:4d:68:28:13:d9:c6:88:e9:ff:4a:
93:ae:62:3a:47:9a:2c:ab:7d:34:24:8a:10:f9:90:
35:19:34:a8:91:e9:0e:81:d6:9c:6c:e4:09:cc:fe:
38:b9:2f:ea:de:a6:f9:61:69:5b:88:77:43:c0:6c:
7e:44:f5:ca:50:27:6b:9c:82:99:db:ca:41:63:78:
35:2a:2e:44:0f:d4:a4:6a:f3:08:29:09:11:72:e5:
6a:fe:20:49:dc:ab:23:22:27:c9:29:84:33:84:1d:
48:4c:52:85:a5:a5:eb:b8:26:68:58:85:2a:7d:fb:
2e:0d:a4:9b:05:ba:81:85:9f:8f:a2:aa:39:3e:d8:
91:d4:1d:b7:f6:bb:24:57:a0:18:40:97:ac:e4:83:
ee:d5:0c:5f:26:c2:bb:61:94:8c:1f:b8:79:a0:ae:
c9:3b:64:07:15:aa:65:41:e7:94:f5:f1:8e:ff:fe:
90:83:9f:b0:3f:ed:0e:2e:43:05:31:0e:ba:12:d7:
2b:3f:a6:3a:b6:32:b4:7b:ca:80:54:44:34:a8:ef:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BA:06:BB:8B:61:38:08:F2:28:E4:F7:E1:D8:D5:CF:8A:E9:89:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bd3a55ef-e19e-3be3-8487-cc9f8cc2ba77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:c8:a4:e7:e1:98:e5:25:d6:f4:f8:bc:f1:3e:c8:ca:5c:92:
af:3c:c6:da:45:a0:15:40:b4:cd:09:0f:61:48:a2:b1:0b:9d:
ef:66:b1:07:21:7d:32:63:b8:67:b4:7d:8a:3a:8a:ff:b2:b3:
af:ec:52:36:c4:7a:2b:bc:3b:2d:9d:68:6b:99:cc:1a:6d:42:
c9:2f:0b:8e:eb:d7:d0:de:43:f5:3f:3c:f1:cf:a3:c4:be:71:
f4:c6:cf:c6:09:cd:22:1a:ed:3e:4c:f8:94:3b:9c:70:38:e3:
98:76:1e:af:c7:5d:47:c1:42:b2:c2:ac:3e:68:b5:12:e6:0d:
55:cc:81:65:70:42:02:b7:4d:b1:a9:33:c4:61:c2:a9:a2:bc:
b5:fc:72:62:e8:19:2c:99:e0:de:83:b2:bc:c3:84:f9:04:3c:
56:2a:49:de:0c:ac:1a:9b:45:91:8e:d1:cd:30:a4:20:81:f1:
93:1b:f7:9f:7f:a8:b5:33:ea:df:ea:e5:9c:44:3f:2b:3f:16:
57:91:48:04:7c:33:6d:3a:db:e4:1b:ac:d2:2c:fa:17:0b:63:
db:cd:ec:9d:6e:6b:03:9c:5e:c3:1d:7d:d6:cd:83:08:c5:a1:
82:ca:4e:51:33:bd:44:ee:0e:f9:53:b0:36:8f:91:22:57:b8:
37:f7:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:42 2025 by rpki-client