Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dca3e4c-61db-39be-b980-0c1fa20b93cc.roa
File: 8dca3e4c-61db-39be-b980-0c1fa20b93cc.roa (raw, json)
Hash identifier: xhzV0KPAJFDHx6mYBgJny/MP2azzQefiuyGQc9PPmso=
Subject key identifier: AA:99:29:9F:6A:F4:E1:30:B3:8B:81:52:90:81:E7:FD:EF:B5:6F:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406DB578F76EA3291AE69370C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dca3e4c-61db-39be-b980-0c1fa20b93cc.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:b5:78:f7:6e:a3:29:1a:e6:93:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=4f100801-fd35-4f06-aa51-f1a7d0213e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:5f:3c:0d:26:ae:ff:c5:45:ad:3e:56:c2:
d2:be:32:c8:47:9b:cb:ca:6f:ac:fb:0e:52:78:29:
49:fa:1a:ef:a8:94:f1:7e:55:80:d9:f4:ac:d1:ed:
2f:db:21:4e:89:c9:7d:39:36:e8:86:54:77:6b:0e:
85:d1:36:da:b2:a1:42:5b:50:f7:3e:00:4f:9a:03:
e5:46:2e:33:71:be:16:11:f2:6a:25:b8:ca:c8:3b:
3d:f0:b0:6b:2f:84:b9:c4:40:eb:0e:4c:43:20:a9:
fb:68:06:90:64:bb:22:db:7c:2f:74:1d:53:b6:f3:
dd:db:bc:77:96:0e:02:20:8f:3e:c4:90:c7:56:01:
b6:13:00:e2:24:0a:e8:65:ab:87:0e:54:c0:40:0c:
d7:fc:d3:c7:d4:b4:57:4b:71:8b:a0:d4:c3:91:7f:
70:45:4e:4f:33:c3:54:5e:83:bb:0c:cb:2c:e9:f8:
c4:26:b9:94:8e:93:65:7a:3f:e6:09:82:cb:7b:84:
54:d6:ef:f4:8b:c8:1b:f0:e8:25:20:e0:6a:0d:d2:
62:34:55:a6:d8:af:a7:df:e3:0c:50:36:48:d5:13:
a7:18:51:8b:cf:70:4f:83:3d:de:1c:14:bc:73:58:
1d:3d:ea:18:0d:be:f5:dc:f5:bb:68:f0:87:de:bf:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:99:29:9F:6A:F4:E1:30:B3:8B:81:52:90:81:E7:FD:EF:B5:6F:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8dca3e4c-61db-39be-b980-0c1fa20b93cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:ad:04:6c:20:30:e9:c7:06:22:6b:8c:35:33:39:81:65:e3:
b2:1f:77:fa:71:c0:f5:69:3b:89:98:92:9f:d6:75:0f:a9:ee:
fa:be:88:ca:53:f7:7e:b8:81:a5:1d:36:6f:54:8c:91:39:90:
88:b7:1d:11:1c:79:f4:97:71:cd:15:b5:93:04:5d:7d:33:36:
7a:90:4e:6c:b3:b4:3a:21:5e:8c:77:44:8f:07:a1:7d:e7:1e:
7f:45:1b:ee:34:da:65:c8:16:6b:dc:be:57:0f:1d:2a:30:f9:
ca:7e:ab:a2:0e:2a:66:5f:f3:8b:2c:4d:22:74:4c:d9:16:68:
00:4a:55:41:89:35:d6:86:93:c3:0f:ec:95:00:f4:d6:3e:6d:
71:9d:98:dc:93:85:0c:ab:6c:45:e0:a1:df:11:a6:b3:ea:12:
92:6b:60:9a:38:10:de:aa:68:a4:e2:f4:b8:30:04:d0:90:f7:
14:31:aa:1f:f4:c2:c3:53:73:f3:f2:2f:ea:6b:aa:81:09:52:
cd:21:57:7a:bb:29:59:e5:55:3f:4e:31:3d:1a:e9:78:a5:fe:
10:68:b9:2f:61:98:2e:b8:18:a5:fc:bc:41:4e:7b:4f:f8:fa:
8f:15:b1:05:f1:92:50:87:5f:50:ec:92:7f:a5:e5:3c:75:2f:
3e:96:78:17
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBttXj3bqMpGuaTcMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMTEyMDAwMFoXDTIzMDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
NGYxMDA4MDEtZmQzNS00ZjA2LWFhNTEtZjFhN2QwMjEzZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwtfPA0mrv/FRa0+VsLSvjLIR5vLym+s+w5S
eClJ+hrvqJTxflWA2fSs0e0v2yFOicl9OTbohlR3aw6F0TbasqFCW1D3PgBPmgPl
Ri4zcb4WEfJqJbjKyDs98LBrL4S5xEDrDkxDIKn7aAaQZLsi23wvdB1TtvPd27x3
lg4CII8+xJDHVgG2EwDiJAroZauHDlTAQAzX/NPH1LRXS3GLoNTDkX9wRU5PM8NU
XoO7DMss6fjEJrmUjpNlej/mCYLLe4RU1u/0i8gb8OglIOBqDdJiNFWm2K+n3+MM
UDZI1ROnGFGLz3BPgz3eHBS8c1gdPeoYDb713PW7aPCH3r8W6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKqZKZ9q9OEws4uBUpCB5/3vtW/eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGRjYTNlNGMtNjFkYi0z
OWJlLWI5ODAtMGMxZmEyMGI5M2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCaxQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWa0EbCAw6ccGImuMNTM5gWXjsh93+nHA9Wk7iZiSn9Z1D6nu+r6IylP3
friBpR02b1SMkTmQiLcdERx59JdxzRW1kwRdfTM2epBObLO0OiFejHdEjwehfece
f0Ub7jTaZcgWa9y+Vw8dKjD5yn6rog4qZl/ziyxNInRM2RZoAEpVQYk11oaTww/s
lQD01j5tcZ2Y3JOFDKtsReCh3xGms+oSkmtgmjgQ3qpopOL0uDAE0JD3FDGqH/TC
w1Nz8/Iv6muqgQlSzSFXerspWeVVP04xPRrpeKX+EGi5L2GYLrgYpfy8QU57T/j6
jxWxBfGSUIdfUOySf6XlPHUvPpZ4Fw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:04 2023 by rpki-client on console-fra.rpki-client.org