Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f9a02d0-4c09-35f1-8733-42c12aa4c4e0.roa
File: 1f9a02d0-4c09-35f1-8733-42c12aa4c4e0.roa (raw, json)
Hash identifier: jlwOEVV21Eu3sEaiiRDhV6T3GA3DcIjV4xtdwQtSmhE=
Subject key identifier: A8:EA:3F:2E:64:64:70:B1:53:9C:0C:00:BB:82:4A:AF:96:FD:2F:17
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DA8FC7FC53BC41A1332DB8380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f9a02d0-4c09-35f1-8733-42c12aa4c4e0.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a8:fc:7f:c5:3b:c4:1a:13:32:db:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=3942298c-278a-4a4a-b372-53e1bf387cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:91:73:6b:69:38:47:dd:d6:3e:93:4f:c9:
0f:1f:11:08:bc:97:90:f9:3e:d4:49:06:02:97:12:
ee:ae:de:27:d0:24:b4:82:2d:be:a9:48:b9:17:16:
74:64:7a:af:3d:dc:d8:72:a2:bb:24:4f:cd:26:b1:
b4:03:57:79:a6:24:e8:25:78:e5:27:8d:9d:3d:b4:
b3:6b:ff:3d:55:8c:c0:6e:d7:44:8c:5c:34:e0:84:
22:46:71:8e:9d:67:76:ff:c8:a6:bf:75:7f:af:21:
78:31:99:10:7d:9c:cc:a0:70:97:b8:8c:6a:19:26:
18:fb:f6:6e:39:29:85:b8:4b:90:31:bd:1c:d6:bc:
c1:33:af:dd:48:d7:6a:c2:aa:64:8a:d4:d8:a1:52:
e7:21:ac:62:57:2c:6e:33:4e:25:90:0d:c4:28:26:
38:e2:78:37:b1:6a:64:31:2a:d8:03:42:05:96:f5:
ea:16:82:d8:cb:08:41:89:e0:b0:bd:7e:92:ca:83:
1d:a9:25:d6:9d:9e:e2:24:ff:3d:1f:e2:23:6b:0e:
87:b7:85:de:f1:b0:23:67:5e:0e:ba:91:ab:97:3b:
e2:b1:2e:2c:87:08:8d:88:6e:c6:eb:6f:6d:fa:98:
6d:70:e0:ba:48:32:65:e0:c3:be:bb:4a:24:27:72:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EA:3F:2E:64:64:70:B1:53:9C:0C:00:BB:82:4A:AF:96:FD:2F:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f9a02d0-4c09-35f1-8733-42c12aa4c4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:39:fd:39:0a:61:d4:5b:39:67:dd:3b:21:ad:ad:99:74:8c:
89:bf:80:e5:f8:4b:54:2f:8d:74:ca:a7:96:7b:b7:30:d8:0c:
d1:51:46:7f:0b:da:79:e2:17:a6:fb:a8:3c:18:ea:aa:de:26:
91:1a:b7:c6:28:9d:8d:cc:da:e2:02:8e:b9:6a:d6:e8:a6:01:
c9:e6:a8:27:61:d6:2c:3e:c4:15:ff:19:32:c2:20:9d:04:ce:
33:cc:6f:11:aa:37:db:4c:87:44:3a:36:97:95:cf:94:dc:54:
07:d6:e1:61:15:c9:fa:dc:55:20:08:c3:cb:9d:e2:5d:78:87:
1b:a7:e9:eb:8a:32:a8:22:9c:0a:0f:ed:1a:8e:26:ea:75:7c:
99:bd:55:2d:6e:c7:c3:2d:56:b3:de:b6:d4:f0:6b:84:01:10:
21:d9:3c:a6:4a:0e:d9:55:df:48:10:a4:71:02:8b:85:57:52:
44:ca:76:46:73:de:e3:dc:03:f4:09:7e:46:f3:6f:88:2f:03:
11:74:e8:68:41:b0:a5:ed:b3:f5:a7:56:ee:c2:b2:9c:0b:1f:
bf:24:0f:53:83:95:ce:07:77:7c:76:45:e5:0e:28:d4:38:b0:
62:47:29:a7:c2:8c:10:d8:b9:2b:20:ac:89:81:30:58:6a:ec:
4f:5b:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:12:20 2025 by rpki-client