Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23262e48-21ba-326f-a70d-82f5a17e135f.roa
File: 23262e48-21ba-326f-a70d-82f5a17e135f.roa (raw, json)
Hash identifier: W5Jn/chA0VSkhEgdKeaPk9Orc/4VvMakMsKH4Q7osng=
Subject key identifier: 39:18:05:E8:54:E5:AB:F0:17:88:D2:0E:03:95:5D:7B:7C:CD:29:54
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406DB591A743F43823E2115F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23262e48-21ba-326f-a70d-82f5a17e135f.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:b5:91:a7:43:f4:38:23:e2:11:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=98b91f2c-81ac-404d-83de-8d2357812e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:1a:80:bd:09:3a:08:e9:40:ab:3f:5a:8a:
5a:32:b6:9b:4b:73:9b:c8:4c:50:ad:bc:76:85:a3:
53:c3:c8:26:74:57:d4:6f:3a:57:b3:11:eb:44:5b:
03:e7:11:09:4d:02:4d:c3:aa:60:b8:7c:13:25:88:
9f:e2:b1:3b:84:0f:79:51:25:63:80:33:f1:be:1e:
28:55:e3:d7:dc:09:ec:9e:5b:07:1c:aa:92:08:9a:
09:dc:03:75:4d:8e:b7:0a:f9:ed:4c:28:c9:03:ff:
79:7b:f9:c2:6a:6c:50:e4:d9:97:ed:ca:bf:bf:a4:
5b:39:c4:4d:4b:58:85:62:59:da:69:3c:6a:99:5e:
d9:7e:4a:5d:10:0f:ee:2b:db:25:af:49:f1:4d:81:
44:77:a5:31:8c:99:7a:18:a4:50:24:fc:90:12:3d:
2e:66:7f:ae:54:db:c2:ec:0d:00:0c:30:c1:31:c6:
18:13:65:a6:ee:62:b3:e8:6d:25:fc:55:3b:63:1d:
36:33:19:b0:56:ca:00:e5:70:e9:0d:4a:4d:b7:8b:
09:9a:b1:83:5d:79:e4:f9:b7:e4:2b:0b:af:4c:5f:
f9:e9:70:2b:02:cc:b9:ac:75:3b:52:10:aa:ae:63:
63:4d:cc:8c:ad:84:96:fa:e0:ce:d2:c1:93:8e:18:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:18:05:E8:54:E5:AB:F0:17:88:D2:0E:03:95:5D:7B:7C:CD:29:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23262e48-21ba-326f-a70d-82f5a17e135f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b5:dd:f9:92:14:68:bd:71:83:ae:dc:33:20:35:f5:15:88:
82:65:e3:a2:08:d7:bf:01:d0:e1:1f:49:a5:78:c2:62:d2:64:
cb:1b:29:92:08:6d:c2:45:c9:2d:07:23:cb:c4:89:ae:fb:94:
fa:a9:8d:0d:0d:3b:9d:48:6c:b1:e0:2a:1f:17:c8:4d:d4:7f:
09:4c:7a:a9:ac:71:c9:75:e5:35:05:6a:1e:b4:4d:1e:81:b9:
e4:1b:b9:9e:37:5d:56:ef:47:df:7a:79:e9:41:cc:87:81:ff:
ac:6c:3c:b3:57:80:b2:43:47:43:2c:47:d9:c4:d7:0c:66:22:
31:3d:9d:57:ea:96:19:8d:68:2f:fd:76:b8:3f:74:22:db:61:
1b:aa:b2:58:74:76:63:b6:52:34:85:10:b4:65:3d:8b:37:05:
32:34:5d:1e:63:89:04:8e:74:05:30:34:b7:1b:fd:2d:e5:ed:
a3:f7:cb:73:fb:c9:f4:0c:6d:db:aa:c9:7c:09:a0:8a:6c:6d:
ea:11:f3:59:fc:51:62:0b:e0:d4:9b:da:ac:98:29:a3:c0:ca:
90:39:ae:11:5a:3f:e6:d0:bf:ac:84:cc:de:0f:ee:7b:be:2f:
a8:76:a4:90:98:9b:7d:d3:e7:ce:81:9e:e6:f2:67:b5:6a:bd:
ba:da:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:05 2025 by rpki-client