Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/100dbc86-6c15-3f04-92aa-bd6dea3029de.roa
File: 100dbc86-6c15-3f04-92aa-bd6dea3029de.roa (raw, json)
Hash identifier: cHHMLLKS9bNqo8KeSsBxzlw9dm7+7MAAC4RPuteUERI=
Subject key identifier: E5:46:43:43:21:C1:94:30:78:69:8D:12:8B:1D:46:C4:CF:53:5F:B0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE564390D2E10163471D80480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/100dbc86-6c15-3f04-92aa-bd6dea3029de.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:64:39:0d:2e:10:16:34:71:d8:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=4f4fe88b-497c-4393-a85c-2e2e0a646119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:63:38:05:c2:7a:10:49:a2:e4:41:28:41:a8:
16:55:cd:e8:89:89:b2:1f:73:69:be:db:4e:7c:a9:
a5:76:66:1c:d9:dc:f2:bb:e1:b1:08:d2:a9:fe:53:
4e:dd:38:13:d1:41:35:6d:be:c6:36:0c:9a:62:5c:
d1:b0:17:4d:6f:0b:43:40:19:aa:b6:aa:56:09:30:
b5:7e:a3:7e:3d:d4:36:a1:e0:e0:d4:d6:77:2b:29:
00:73:33:51:10:f5:a9:80:be:ac:75:7b:c9:7c:fe:
b7:e5:d7:96:7e:5b:0d:bf:dc:cf:5d:37:7d:54:9f:
5d:78:fe:d3:16:a7:3b:0c:1e:82:4a:77:2b:c4:ef:
93:d0:10:dd:d2:9c:f9:6b:98:bd:c9:ce:52:74:db:
de:6a:da:45:01:89:41:b0:fb:93:87:80:72:01:d2:
b4:ef:10:63:49:28:9d:17:2a:b6:ef:f3:2c:b4:a0:
4d:4c:39:6e:74:f0:9c:1e:9f:91:3a:a2:9d:e7:13:
39:20:d2:06:b3:44:ca:1c:c7:2a:06:f7:73:aa:4a:
ca:6c:86:20:cb:35:bc:9a:02:10:19:15:ce:a8:9a:
5c:04:5a:c5:96:f0:e8:dc:e6:27:0e:d7:8a:a4:7f:
2d:5f:24:59:56:d4:51:4a:a9:61:73:e3:07:7a:da:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:43:43:21:C1:94:30:78:69:8D:12:8B:1D:46:C4:CF:53:5F:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/100dbc86-6c15-3f04-92aa-bd6dea3029de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ba:bb:77:40:97:cc:18:bd:f9:94:81:be:a6:41:11:f1:00:
0f:29:4d:ea:cc:92:9b:dc:13:cd:3b:a4:34:59:af:b7:a8:d1:
b0:b4:15:41:85:ab:8f:5a:32:2b:51:56:c8:cc:c8:ec:4b:f6:
10:7e:eb:c3:c2:22:e6:1c:34:6f:a0:67:94:58:2d:33:a4:3a:
43:8f:26:1e:4f:a3:dd:d7:ca:25:ac:d4:18:dc:e2:7f:42:8e:
e2:fd:48:a5:22:0c:77:e8:f8:3e:69:d3:0f:03:98:79:96:42:
0b:55:79:52:83:b2:19:e9:ff:94:13:e4:d8:0c:a6:0a:7f:ba:
69:ad:25:23:20:8d:a6:23:14:38:ed:7b:5c:fe:92:7e:b8:f9:
f5:91:10:a1:c2:43:42:ee:90:f9:ba:ad:b2:61:e8:92:06:ed:
89:37:40:5c:db:e0:65:f8:aa:23:88:e5:7c:2f:fe:e0:d7:48:
69:86:6c:f8:9a:84:93:d3:8a:de:6e:a3:24:a8:02:29:5c:bb:
11:3b:cb:63:3e:bc:c4:a0:45:b4:e3:62:e0:2f:c8:5b:ac:92:
11:d4:00:6f:36:6d:ff:44:e4:82:48:5f:88:26:0b:c7:e9:7b:
b6:08:20:41:cd:3d:7b:64:f1:53:31:d1:61:8f:be:c2:3e:68:
e0:49:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:41 2025 by rpki-client