Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db4e3bae-6852-3aa4-83ef-d2c2a9e1e354.roa
File: db4e3bae-6852-3aa4-83ef-d2c2a9e1e354.roa (raw, json)
Hash identifier: MKDbWZv1J8wT8Z9B4Zhpe0ec0P2j/JRaC1Wo8I2KSFY=
Subject key identifier: 05:7B:34:40:54:B6:EF:60:97:77:45:5C:98:C6:0F:BF:94:6B:85:86
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E93B1CEFF5232DB5ECC1A5080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db4e3bae-6852-3aa4-83ef-d2c2a9e1e354.roa
Signing time: Thu 14 Jul 2022 21:12:08 +0000
ROA not before: Thu 14 Jul 2022 21:12:08 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:93:b1:ce:ff:52:32:db:5e:cc:1a:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 14 21:12:08 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=256cb52d-efa6-4c59-970a-1f9887fd0136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:ef:52:be:0b:6c:8e:9d:a1:8f:29:a7:5c:
b1:b8:fd:21:80:30:c0:cf:57:58:d8:0b:98:71:71:
26:37:f5:ad:89:be:61:c4:92:c3:21:ee:72:72:4d:
50:26:56:eb:f3:13:e0:d9:e3:29:ae:82:74:64:ca:
0d:ac:c9:ea:bc:07:87:d9:3d:c9:f4:b7:28:3e:74:
a1:28:bd:ab:04:d3:38:3f:03:49:f5:87:1e:fe:b0:
bc:30:87:a7:87:d4:b3:a9:22:1e:9a:16:42:03:ae:
93:12:50:c0:1a:bb:90:38:9b:ba:ec:7e:62:0f:14:
82:26:ad:e9:85:24:06:44:38:f2:d1:38:53:3b:c2:
14:c2:01:3f:36:fe:67:7e:33:5a:db:b9:88:b9:14:
aa:ba:f1:80:c4:df:63:e9:2b:30:b8:aa:e9:1a:b6:
b0:f8:57:51:74:c9:fe:9e:4d:74:b7:f8:18:e4:b1:
c5:d0:07:c8:ef:0a:87:f3:c9:53:3e:3d:f1:5f:19:
d4:c5:c4:d3:8c:24:1e:eb:c3:a6:76:27:83:5f:66:
9d:62:e3:43:b7:56:22:cd:7d:e6:0f:4b:53:a8:8a:
05:64:ec:80:77:83:16:20:24:cb:48:e7:d0:af:38:
e8:c6:ce:32:e8:b0:ce:d2:9e:20:93:b7:88:2f:73:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:34:40:54:B6:EF:60:97:77:45:5C:98:C6:0F:BF:94:6B:85:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db4e3bae-6852-3aa4-83ef-d2c2a9e1e354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:53:b3:ff:7c:a1:e4:e0:3a:4c:a6:1f:cd:d9:c8:53:d7:94:
1d:da:d8:4d:cc:8f:4e:18:b6:35:e5:2a:89:d1:ff:49:e8:ff:
cc:5b:44:fa:a5:b1:a6:1c:3d:85:5a:d1:58:a7:e9:1c:80:0c:
39:b7:4b:9b:23:e9:30:c3:92:c4:07:23:04:ed:a9:55:08:45:
5b:0c:ca:77:af:44:d7:62:61:d2:b7:9e:21:63:55:9b:73:7f:
c2:c4:e5:46:49:dd:2d:71:b6:07:60:48:36:a9:ec:bb:71:bf:
74:b1:41:ce:49:9d:b0:3f:d4:9d:7a:74:17:72:6d:18:6a:ac:
d0:8a:f8:d7:30:5e:13:11:72:c8:d2:c5:a9:9f:07:c4:ab:2e:
c1:b8:0d:62:1b:f1:b0:cb:18:fe:4b:a1:56:d9:3a:6d:5a:a9:
77:20:77:a0:8b:e6:59:69:6e:c6:d3:3f:13:3e:06:06:4d:6f:
7e:10:e8:04:a5:9b:12:a6:1c:6f:e0:b4:3b:be:59:a1:70:d5:
c2:54:c1:c2:25:9f:25:28:80:c9:48:c5:a9:b4:df:e6:b7:87:
70:d7:1d:f3:23:1a:1b:2f:23:44:e2:5c:b6:61:dd:11:af:bd:
c7:c9:37:bf:76:7c:7d:dd:2a:49:a0:80:bb:09:04:b5:e7:4a:
ab:8e:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:09 2025 by rpki-client