Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb35c3e7-90a5-3d35-8d05-2e13150237a8.roa
File: eb35c3e7-90a5-3d35-8d05-2e13150237a8.roa (raw, json)
Hash identifier: 0UXwnnavZUahqT2IKAp9lg5PX6vJJ+EBPUTu4mvxCUU=
Subject key identifier: 38:7C:12:44:81:6F:4C:30:37:06:24:F1:34:23:59:78:04:2D:0D:05
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF86D75007F6ABC300F3D20B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb35c3e7-90a5-3d35-8d05-2e13150237a8.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:6d:75:00:7f:6a:bc:30:0f:3d:20:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=41cf6ead-3a88-46f3-8165-abdd6e020a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:66:6e:c3:d5:fb:1a:93:a6:0b:a5:31:4b:
55:6c:79:1d:6c:c2:7b:bf:e1:6e:0f:d2:d5:4f:61:
ae:b1:12:2a:2f:17:1a:c7:38:ee:00:3d:f8:a7:20:
c1:ae:7d:51:a9:fd:98:47:c3:ce:08:88:1c:08:53:
11:ff:c3:52:03:b7:ee:24:bd:30:65:57:6e:86:ab:
d8:f3:91:a1:68:df:97:03:88:c2:5e:ec:43:ab:be:
d8:a3:7e:ec:73:96:f5:39:f4:71:bc:a3:58:60:1c:
bf:2d:56:47:01:7e:dd:35:1f:3b:7b:99:b3:5b:97:
94:63:6a:dd:e9:f8:c6:98:3c:44:a4:3d:b9:bf:3d:
75:4a:e9:2c:5e:b0:28:93:b0:6b:9c:c2:89:72:b4:
d3:88:bf:b4:7b:26:5c:27:ad:ac:05:e0:9f:57:b3:
ac:8b:f1:d0:ee:b9:37:7c:95:b2:a1:81:98:35:1a:
c0:67:55:36:93:cb:2b:74:e3:cf:03:bd:4b:20:a0:
71:1c:19:e1:a5:0b:60:5e:62:07:1a:22:c3:c0:36:
5c:a7:5d:40:e1:68:a7:93:cc:63:c3:fc:d6:eb:0e:
04:55:10:5b:a4:07:ec:e0:49:d2:0b:ee:d3:69:3e:
a1:cd:15:0a:51:14:ef:ae:c0:86:89:9f:f6:57:52:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7C:12:44:81:6F:4C:30:37:06:24:F1:34:23:59:78:04:2D:0D:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/eb35c3e7-90a5-3d35-8d05-2e13150237a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:9d:62:88:87:47:5d:e9:23:ce:c7:b5:6c:c5:0b:90:94:2a:
df:7a:ad:cf:89:2b:d1:d2:10:2d:76:c4:ae:4f:27:70:6b:e8:
c7:9b:05:88:14:74:8d:3c:ee:72:e3:8c:4c:e3:89:8a:f8:36:
d7:49:aa:7e:0c:4a:93:78:be:1e:67:98:eb:09:5f:ad:24:35:
a8:cd:eb:44:24:63:d2:16:c0:db:98:96:06:5f:5c:e9:21:8c:
b6:e6:02:83:01:d4:02:94:75:c9:55:71:af:04:31:1a:89:3b:
88:ab:74:40:e4:56:4a:c1:ea:75:98:9c:26:d9:12:5f:95:82:
80:54:cc:38:5e:ea:ea:fc:ba:d1:ec:3f:4e:5f:45:d0:f7:ab:
d4:f1:48:cd:49:18:78:b2:a0:e8:ec:b1:b3:a6:a4:33:ba:af:
23:f8:c7:b4:23:9f:5e:18:75:75:bf:b8:ff:b4:14:f9:4d:e6:
bd:11:58:a7:c6:f2:94:08:00:9e:f0:60:4e:15:03:31:8c:5b:
4f:f7:e7:d0:59:4d:6d:c8:bf:93:d6:ca:43:ea:c3:9f:b2:30:
0b:94:3d:81:87:56:b3:95:36:f9:2c:01:e9:c1:6a:ee:40:3b:
61:fa:6d:be:d7:bf:82:d5:3e:18:50:a5:29:ad:d6:4e:d3:cf:
84:ac:33:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:37 2025 by rpki-client