Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff643834-93ac-3e0a-aa08-d66b8cec99b0.roa
File: ff643834-93ac-3e0a-aa08-d66b8cec99b0.roa (raw, json)
Hash identifier: oDef7pO5qbZEBkIYcdL4Z4IhcdjdHR1HWPhf13oJ8ug=
Subject key identifier: EE:6A:16:79:5A:71:C4:89:6C:2B:34:35:C2:DB:F1:7E:B9:79:64:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE475DCBC0B081035FC257780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff643834-93ac-3e0a-aa08-d66b8cec99b0.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 23.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e4:75:dc:bc:0b:08:10:35:fc:25:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=119d8f20-e7ae-4501-b19e-2ccd56bd087b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:83:80:14:80:68:d3:96:ac:e1:37:b1:88:
b6:99:fc:27:fa:f8:e1:e0:bd:69:3a:0a:69:b6:cf:
ce:f2:7a:fe:62:a7:3b:55:bc:23:a4:c5:07:c9:5a:
62:6c:d0:1e:cf:4a:a5:92:af:fc:e8:52:53:04:97:
a8:92:35:36:3e:52:25:eb:17:94:94:0f:2f:a5:c7:
4a:a4:a0:61:40:c5:0c:6f:af:d8:d9:e0:73:14:91:
81:55:c3:97:f4:0e:54:61:96:bf:b9:f9:8d:20:e4:
0e:bb:25:3c:05:d4:00:8e:50:ca:81:d0:36:42:f1:
29:1f:f7:fc:93:7d:80:56:2a:03:b5:0e:05:23:65:
6c:04:df:60:27:a1:01:29:63:e9:ec:47:e4:5b:fa:
87:c2:f5:a7:7e:a0:75:4f:33:9c:d3:f4:12:c4:be:
60:8d:42:7a:9d:28:6a:38:7c:cb:4d:94:fb:d3:2e:
29:c3:63:47:78:7f:1d:79:73:4a:50:1f:ae:08:eb:
3a:fa:a4:e4:93:60:48:67:e1:f4:76:65:7f:c4:60:
3b:0b:5a:2a:db:fa:c4:f3:27:5d:5f:44:cc:da:93:
77:8e:0c:2a:da:24:30:92:09:44:7e:37:56:05:63:
cf:be:7a:0a:6f:96:f6:a6:2d:ec:30:92:48:5b:03:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:16:79:5A:71:C4:89:6C:2B:34:35:C2:DB:F1:7E:B9:79:64:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff643834-93ac-3e0a-aa08-d66b8cec99b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:66:e5:bb:62:83:2f:e3:e2:70:df:cc:c5:8c:2a:c9:72:55:
88:ed:2d:81:7f:5f:3d:20:1e:02:b0:05:6a:d1:80:51:10:30:
cf:19:56:5d:6f:67:29:2f:9f:3b:4e:08:59:4d:18:e1:bf:2c:
2d:38:15:d6:c5:8e:37:85:4a:ff:2b:7c:38:b3:36:fe:47:5f:
45:03:9c:87:ca:5a:8a:b3:23:e3:61:80:84:ce:70:22:d1:46:
21:c8:0e:db:87:65:83:53:f9:79:eb:26:4f:40:9d:1a:75:af:
99:8d:95:8a:64:d4:22:f5:70:56:23:72:21:f0:c6:b9:f2:f2:
5b:3e:29:28:7b:ce:ad:6d:25:ce:82:75:9c:06:0a:d3:3e:12:
6b:6e:8a:30:12:69:44:2a:c2:ce:91:be:69:92:32:12:30:e4:
a2:da:38:a3:5a:99:7d:e4:d4:ca:d1:58:65:a0:0c:c6:9a:4b:
a3:e0:f6:92:90:3a:32:1c:33:5a:cd:51:84:97:ed:f2:3c:72:
5e:e7:28:ae:de:0a:96:4f:7d:0a:73:54:1c:76:b0:a0:90:8f:
4f:f2:51:cf:c3:00:f7:6f:0d:9d:49:0b:89:75:3e:ce:b3:db:
a7:8b:c2:0a:d7:80:19:81:fb:a2:37:e9:e8:d7:b1:3f:2a:0f:
70:b8:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:40 2025 by rpki-client