Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ff127a1-f128-36ff-bcdf-0cdfec9fd324.roa
File: 4ff127a1-f128-36ff-bcdf-0cdfec9fd324.roa (raw, json)
Hash identifier: BXiEocnKMUuhK6rGukeoVhTo0aAl5eUy/oDUPwY90Wg=
Subject key identifier: ED:95:DB:C5:75:3D:42:06:8D:1D:D0:20:37:51:70:D9:DC:1A:FE:6F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D339E2C4D03BBE8CC4495EA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ff127a1-f128-36ff-bcdf-0cdfec9fd324.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:9e:2c:4d:03:bb:e8:cc:44:95:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=a1095ba3-fbec-464d-a842-d118d8267358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:e5:75:3a:5d:b5:8d:7d:1a:c3:fc:f7:3c:
1a:e4:43:d9:d1:db:c4:c3:8c:7f:e6:53:0e:9c:da:
e9:f7:d4:9c:f0:3c:26:05:31:47:95:07:59:e5:80:
7f:04:51:aa:d0:a7:8b:ba:78:fd:5f:04:06:6d:b1:
55:e8:bf:ff:f4:1e:f6:39:d7:7e:7b:84:56:08:8f:
3f:b0:67:3d:9d:b4:a2:51:f0:41:10:ee:27:07:f2:
41:c6:2c:b9:5d:48:1d:c6:56:b5:80:42:11:55:f3:
04:67:b7:c3:66:16:ee:82:f3:23:75:65:89:95:b4:
9a:07:7c:13:8e:06:8b:14:08:c4:6a:0b:8f:18:24:
ba:5e:58:a0:6d:69:ec:2d:7b:ab:f0:73:cb:3e:49:
a5:07:12:c4:68:fe:04:8a:fb:03:e7:f7:34:75:1d:
55:28:90:d5:eb:bb:d6:fe:5d:52:f3:78:31:ee:aa:
91:85:8a:d7:dc:4b:76:9d:3f:fb:12:2a:0d:c9:eb:
57:ea:60:19:9d:d8:32:9c:36:88:ee:8d:2b:5e:ed:
4e:d9:08:ab:5d:23:57:45:0b:97:17:29:27:54:52:
7a:34:fa:a8:86:e4:07:19:0c:61:cd:57:a4:1a:f2:
52:6c:af:e7:c6:2d:49:51:18:c6:ee:f9:e6:5b:b1:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:DB:C5:75:3D:42:06:8D:1D:D0:20:37:51:70:D9:DC:1A:FE:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ff127a1-f128-36ff-bcdf-0cdfec9fd324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:45:69:47:db:8c:5d:f2:b9:0a:f9:85:c1:52:43:92:9b:c1:
b8:a1:c9:89:9a:ec:35:75:db:e6:6d:77:48:3a:c8:19:a9:c5:
f0:c0:6c:f1:87:48:82:1b:47:da:2d:63:24:f4:03:43:b5:17:
b1:3f:0d:0a:8e:ad:a4:9b:c0:03:14:41:df:6f:87:18:5e:d4:
02:5e:e7:9d:00:9f:08:88:e6:01:da:66:67:b5:c8:84:4d:67:
ba:d6:44:67:f8:31:0f:6d:36:40:08:2c:da:d2:99:43:47:31:
25:8d:9b:5f:53:9d:70:24:15:bb:02:72:45:b2:ea:09:ac:40:
ea:2a:e4:07:a5:ee:9f:71:2a:92:51:e6:03:e1:a7:9f:e5:4a:
ba:55:3a:92:4b:b8:cf:29:04:11:89:9e:7f:e7:2c:09:18:97:
6a:ed:c6:8a:15:af:b7:52:8b:75:11:87:5c:48:8b:7c:d5:15:
d9:38:07:64:1a:2c:03:65:5c:0e:74:b4:07:f4:59:01:33:4d:
f1:15:e0:d3:09:c5:bb:a8:49:ab:f9:76:5d:2d:44:a2:b7:9b:
1a:7a:e0:a4:01:d8:20:68:b7:f1:08:22:29:25:b7:21:77:8d:
15:ec:71:57:18:cc:81:5a:10:11:e0:e4:7b:c0:43:5e:71:03:
81:7e:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:28 2025 by rpki-client