Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5b58f0a-ff5f-3475-8e62-890165d465b8.roa
File: c5b58f0a-ff5f-3475-8e62-890165d465b8.roa (raw, json)
Hash identifier: 7l+dCTEG322sEAzb0aWQ0Tao62Zvr0MIZDSnJNZ530A=
Subject key identifier: DF:2C:54:F2:2C:9A:8D:C9:DE:DC:58:DC:02:34:E9:34:D6:75:B8:D4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBD58B3F8290AFCF609BB2580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5b58f0a-ff5f-3475-8e62-890165d465b8.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:58:b3:f8:29:0a:fc:f6:09:bb:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=c152bc15-b732-442e-903a-f2aa93ce851d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:1d:d3:fd:6b:84:b5:19:97:bb:6f:f2:7a:
9f:f6:cb:a3:23:c2:17:f2:e4:50:8a:24:d2:9e:9d:
ae:bb:f2:31:8b:16:35:8c:fb:6e:9d:6d:ea:2a:4b:
3e:51:21:4f:04:2a:b1:b3:ab:b4:08:60:72:1d:71:
2c:22:49:a2:68:66:06:2f:b6:ef:89:32:12:10:32:
a3:f4:58:21:cb:c0:41:66:28:19:5d:1c:aa:d8:32:
52:8d:a9:45:37:df:81:3c:d0:d4:56:9c:2f:7f:5f:
f2:8d:52:91:7e:b2:9b:0b:a8:c6:32:d1:3d:35:93:
72:ad:47:d5:a0:d1:3f:54:71:27:14:38:d7:80:3c:
39:87:81:a3:97:34:7b:5b:d3:29:3f:dc:07:61:ef:
bf:9f:51:11:97:a9:d9:93:42:f0:56:6f:ff:3c:97:
c6:ba:be:91:ae:36:d8:69:68:71:ca:7c:fa:cf:3e:
36:bb:cf:c4:a3:e1:f2:15:e0:55:cf:f2:d6:c7:c2:
80:46:c5:64:29:26:00:1b:46:8b:56:23:1e:aa:3c:
1f:3b:03:2b:3b:c9:d1:99:57:d2:8a:fa:9b:a0:99:
f6:7c:0b:3e:34:e9:5d:97:46:bf:ce:bf:1e:60:30:
cf:71:24:1b:97:45:b6:ba:1d:26:71:48:98:43:8b:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2C:54:F2:2C:9A:8D:C9:DE:DC:58:DC:02:34:E9:34:D6:75:B8:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c5b58f0a-ff5f-3475-8e62-890165d465b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:fa:71:16:ef:4f:b6:ba:21:ba:97:28:80:00:68:c5:46:82:
f4:b8:b6:59:ef:5f:5f:19:7d:10:0e:b2:18:c7:56:0e:e4:2b:
f2:e0:9e:8b:b5:0d:2b:4c:84:88:04:5a:3a:81:b5:aa:da:9b:
bc:2a:cc:7d:5d:ed:d0:29:55:27:14:40:ce:95:b2:74:ba:ab:
1c:b4:23:ea:4e:ec:1f:b1:48:54:5e:d1:ed:7f:9c:ad:42:e9:
67:57:9a:d9:f5:88:78:49:1d:a2:f9:8a:0b:5f:c3:23:24:2f:
cc:66:be:0e:d6:0b:35:9b:04:c2:9d:32:79:b6:92:ec:6a:bd:
e9:94:8c:29:cf:29:96:b7:bc:ba:94:7e:5e:a8:38:56:2f:2c:
51:69:ef:e6:33:e9:22:f6:cd:d4:9f:b7:ea:f0:a9:9b:74:00:
23:04:bd:17:a7:06:2c:87:29:87:6b:f0:db:43:e3:9b:ab:ba:
78:8a:71:12:5d:94:5f:ad:e7:01:47:21:39:ae:a4:df:17:97:
da:d4:b7:8b:72:ec:21:59:b5:d8:44:4e:6d:20:c8:09:c8:ba:
f2:06:fa:8d:c9:c4:93:ee:54:56:a6:95:ae:2c:45:dc:a5:c6:
4c:17:ec:db:08:31:51:a9:d2:9f:59:a3:0a:ec:44:9f:84:5f:
07:92:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:05 2025 by rpki-client