Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/204c9e72-21c4-31c3-8b87-703b06da44a3.roa
File: 204c9e72-21c4-31c3-8b87-703b06da44a3.roa (raw, json)
Hash identifier: mlLHvB32huj1B3omxTyNkOcMjgQC3yea6DLu3sOHYcc=
Subject key identifier: 78:92:AA:20:5F:13:59:B7:E9:AD:67:3D:E7:80:82:04:5A:CC:60:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401F8A4EDC1E5677AA189E7080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/204c9e72-21c4-31c3-8b87-703b06da44a3.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:8a:4e:dc:1e:56:77:aa:18:9e:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=4e8e47ce-fa6a-4cdb-8013-f0817e5c9668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:1f:dc:e0:35:ea:0d:7c:cc:ec:69:51:a5:
6d:86:b9:4b:e6:d1:a2:8e:cc:1f:b5:1d:34:ac:ab:
a0:1a:99:ff:f6:9e:72:c1:c9:04:1c:a6:d8:b3:b6:
95:96:b1:23:54:64:d7:c7:69:2f:af:ac:35:75:52:
88:ea:7e:6d:50:a7:03:83:63:c7:6d:8f:2c:9e:0d:
ad:b0:2e:29:34:36:72:2a:d2:e1:fc:d3:5c:5b:ec:
2f:9b:a1:c6:8f:50:cb:f9:9a:e1:02:47:a8:60:88:
83:59:15:51:e7:10:19:0c:75:3a:ae:ea:37:6f:5f:
b3:4e:a7:72:dd:6d:0a:03:da:3b:19:17:59:7d:59:
8e:54:9b:2d:30:23:d1:2a:10:62:91:66:9b:8c:f0:
3c:1b:8f:4e:56:72:11:a6:f6:29:8f:ea:ba:d5:af:
c0:ad:99:92:30:36:ad:67:55:23:05:47:85:05:ba:
50:f9:37:98:f9:36:77:ee:64:2f:4d:b0:21:48:8d:
4e:88:71:0a:72:7c:94:09:8d:3b:d3:bd:d9:7f:d0:
5e:ed:9b:79:b7:97:e4:19:26:5b:bb:28:60:7c:02:
76:ae:e8:f7:a4:68:cd:1a:52:91:2d:04:55:d7:e2:
a5:ce:38:e6:21:b1:4e:47:9f:6f:07:97:50:c3:5f:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:92:AA:20:5F:13:59:B7:E9:AD:67:3D:E7:80:82:04:5A:CC:60:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/204c9e72-21c4-31c3-8b87-703b06da44a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:35:25:24:85:c0:86:87:22:c4:24:71:f9:ad:41:5a:32:65:
3f:a8:3d:fc:29:f3:d8:21:cb:48:2e:ee:9d:09:c9:0b:fa:92:
41:2d:6d:8d:26:6b:79:cc:d5:fd:c9:23:80:b0:33:cb:3f:1c:
f4:37:8a:34:24:1b:c3:aa:49:13:9f:52:b0:f1:96:a9:2a:c3:
3f:ec:23:81:b8:fb:63:1c:57:41:10:e9:bf:17:f8:2b:2b:f6:
29:bd:f2:05:d2:ba:67:13:35:4a:1c:06:3a:b4:2f:bd:68:37:
5d:9f:64:7a:7a:8a:bc:48:10:5b:8c:f0:69:e3:0d:94:76:61:
76:89:5d:13:6f:a9:8e:bb:c9:e2:10:e0:f7:b9:42:29:78:21:
b6:33:4c:95:f1:ef:0e:fa:c6:01:f1:a9:a1:63:6a:a2:c5:f8:
cf:36:15:87:db:ba:13:9c:81:30:f0:d4:dc:16:ba:2a:ee:cf:
b4:9d:8f:6e:64:09:c2:6a:32:43:8f:0f:03:5c:2a:b6:08:c5:
b7:d9:06:73:1a:44:5e:d0:29:c5:0a:db:27:6f:78:b6:68:99:
91:68:cb:8a:1f:de:22:34:c5:f1:b7:d6:6b:73:f1:23:61:95:
52:91:28:ac:89:50:77:51:d0:7a:40:a5:cf:d6:90:95:3a:6c:
c4:fc:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:32 2025 by rpki-client