Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1dd06fc-de6c-3bc2-af2d-eb871e1ee961.roa
File: f1dd06fc-de6c-3bc2-af2d-eb871e1ee961.roa (raw, json)
Hash identifier: di/EHVLXJD9vlHIV9A2uY6W9G36OUJFIGjzWi/6S4NM=
Subject key identifier: 85:35:C1:32:17:4D:92:68:01:86:34:50:82:4F:D6:A1:17:F1:04:29
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401BE77A285AD1730461539F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1dd06fc-de6c-3bc2-af2d-eb871e1ee961.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:e7:7a:28:5a:d1:73:04:61:53:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=c5899f70-0a1e-4930-9905-1ffa8dc29b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:4f:80:79:3a:e1:5a:09:4d:69:34:75:79:
84:c9:77:6c:b8:bb:a7:c4:f6:a2:c3:41:b1:4c:1c:
92:dc:4b:27:a2:c6:c6:1c:c0:63:d5:b1:29:3f:3d:
d8:00:18:42:83:41:3c:ae:ac:ec:ba:61:cf:b6:ba:
a1:2e:91:c3:0e:14:23:5e:b9:64:fb:59:35:24:a9:
ad:30:d1:43:ee:f3:98:fa:1b:7a:f8:9b:0d:18:15:
68:dd:08:f2:ce:ab:ca:1c:a8:bb:0f:72:44:9f:5b:
2a:68:22:e7:b2:33:71:43:76:94:47:18:81:11:81:
57:eb:7c:e7:a7:e1:42:82:7e:80:a3:2b:e1:0f:22:
a8:ed:06:1a:4a:03:1b:f4:2f:e0:dd:7d:be:90:38:
df:36:54:61:25:c0:57:76:98:48:29:93:64:c5:f6:
f7:4e:a7:9a:ff:b6:cc:a2:31:76:ca:14:2e:62:bc:
1e:50:20:7a:33:4c:f0:c8:35:00:6c:0b:19:d3:df:
ab:2e:ff:58:23:3b:fd:9b:69:fb:8a:47:d1:48:b7:
58:85:3a:47:26:50:cd:d0:8d:36:2d:46:13:e3:48:
68:3e:de:29:09:25:01:ca:54:6f:14:dc:f5:c9:74:
4b:8a:45:83:c1:86:a3:9b:56:23:49:2d:4e:15:de:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:C1:32:17:4D:92:68:01:86:34:50:82:4F:D6:A1:17:F1:04:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f1dd06fc-de6c-3bc2-af2d-eb871e1ee961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:5e:ea:13:33:c2:6b:b1:ef:e9:2d:f8:d5:38:81:37:e1:0e:
f2:e6:45:3c:18:72:f7:ed:e5:68:d2:b9:41:d5:36:ba:96:50:
31:d7:d6:77:d5:fa:1a:42:0a:a1:ce:e4:63:36:9a:bf:33:61:
cc:fa:90:53:d9:d5:0e:d9:bb:9e:b0:84:b4:8a:77:b4:28:bc:
25:ac:05:15:f4:40:af:c1:94:ca:38:b1:c3:80:06:31:85:ba:
a5:6c:66:dc:70:14:87:72:40:d1:e7:3d:c4:8e:f1:08:da:b0:
df:12:b5:64:14:00:3b:41:88:81:fc:5a:96:89:9a:6e:a5:10:
12:42:40:a2:e5:e9:6c:76:f0:5d:fb:03:50:1d:87:5d:75:03:
ff:6f:af:a5:8e:f4:eb:86:36:43:d3:13:22:1a:d9:8d:61:c7:
43:c3:df:cd:d7:97:7e:53:5c:a8:fb:43:35:78:1e:b5:72:fd:
ec:b2:4a:6e:ac:86:c9:7c:f2:02:f6:00:74:4d:24:77:bf:f3:
1e:63:61:80:4d:d7:74:94:43:f9:fe:ee:f7:f4:32:64:c3:ca:
f1:7c:88:90:fb:e4:bb:18:fb:8c:d5:4c:70:ce:e5:b8:a6:f0:
53:27:a3:61:6e:ee:75:e3:8a:5b:bd:ff:b9:a9:7e:09:6b:c0:
19:83:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:21 2025 by rpki-client