Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e55786a6-6ba8-3ee0-9051-7812d92e4d58.roa
File: e55786a6-6ba8-3ee0-9051-7812d92e4d58.roa (raw, json)
Hash identifier: Z9WAz5Wzm8V7z79fSrl4/X81ekoGqoxzbtn36tfRd6s=
Subject key identifier: 75:AA:F3:4E:18:89:7C:5F:2B:53:99:EC:E9:E5:7A:60:C1:1B:EE:2E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5ABB383E54D4141CEFF85FB8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e55786a6-6ba8-3ee0-9051-7812d92e4d58.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:bb:38:3e:54:d4:14:1c:ef:f8:5f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=43abeef0-f7ee-4459-b7c2-03186405c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:e3:a3:b2:0e:85:a7:b1:76:a0:aa:89:61:
e0:df:02:48:41:5d:f8:90:cb:7a:4a:19:24:55:07:
69:20:fc:9c:7f:e3:ca:82:60:34:89:0e:a1:d8:d5:
71:2e:8b:c2:4d:29:a6:f3:8c:74:3b:c0:04:9f:04:
9b:87:57:3f:fb:c4:c2:74:db:2a:bb:98:ac:36:9a:
b2:c6:37:87:da:11:35:ca:63:f0:7d:96:bc:e4:79:
82:83:d0:e8:61:94:24:b3:2e:dd:63:e3:1e:88:e4:
93:c8:16:47:35:bf:03:e9:61:84:76:6c:c0:f6:07:
9b:b8:fc:38:82:06:a2:ec:65:b9:9b:27:01:78:1b:
fa:df:49:15:04:60:88:25:bf:de:e1:5d:dc:91:46:
84:06:a3:ef:60:93:df:6b:2f:8c:de:da:9c:ee:1b:
90:67:50:2c:66:07:6f:2a:5e:83:43:b9:69:07:bc:
ff:3a:8f:3f:54:21:0a:f2:66:4e:7f:2b:f6:42:80:
7f:cb:82:bc:41:27:f3:78:28:a8:02:ca:86:df:78:
3b:6b:ae:bb:7f:3b:a6:d8:63:59:e7:5e:75:cb:cd:
07:a8:b6:5e:b5:a7:41:a4:e2:ef:e4:75:a9:3d:63:
2b:ab:94:fa:08:63:14:44:ae:f1:35:3c:8a:db:af:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AA:F3:4E:18:89:7C:5F:2B:53:99:EC:E9:E5:7A:60:C1:1B:EE:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e55786a6-6ba8-3ee0-9051-7812d92e4d58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:c2:7a:81:f7:93:e7:d5:85:ec:8d:b8:d4:f4:9d:85:98:45:
7d:4e:03:3b:a5:e5:37:21:cb:ee:f6:3d:71:82:9b:50:78:0f:
12:a9:11:55:85:c3:e3:21:d1:33:56:ce:80:95:12:62:fd:51:
15:33:85:f7:6f:64:a6:7a:15:20:9b:ed:5d:2f:b7:3e:43:0c:
f5:63:5e:53:12:6a:08:39:52:3e:34:96:0a:a8:47:be:16:5a:
33:1d:f1:b7:50:e2:3d:21:c5:5f:77:dd:d8:bf:dc:b0:ae:ed:
24:6c:f6:c3:0f:aa:0d:7b:bd:11:de:d2:38:ed:c9:a5:c2:54:
18:27:5d:08:48:61:a3:fa:66:6f:a6:1b:52:34:c6:25:cd:28:
b8:2c:d5:d8:ee:46:78:f1:1c:e9:9b:c3:4c:02:88:27:37:ef:
f8:64:16:26:1e:c7:65:00:73:03:82:29:6c:49:66:bb:68:f9:
98:da:7f:55:0e:de:95:3c:59:89:d4:97:bb:8a:85:4a:7f:0f:
12:cc:d3:2f:81:86:ae:42:28:b9:87:45:d8:48:1d:ef:b1:e7:
c7:75:25:c0:a1:f2:32:cf:f6:6e:23:37:00:24:dc:a2:d6:5f:
ea:0b:18:9a:a0:f3:99:d2:ed:58:66:6b:1b:e6:22:2f:0c:48:
4c:ee:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:38 2025 by rpki-client