Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8d539d0-e338-377c-9c79-b9b7e5e89a77.roa
File: a8d539d0-e338-377c-9c79-b9b7e5e89a77.roa (raw, json)
Hash identifier: R+bcPUSdgziOa1esfZ0BvGRa2urc7jFFrUXGtFa4/gY=
Subject key identifier: F1:F5:2C:53:14:B2:6C:CA:1D:8F:A1:2A:E8:75:E7:63:70:48:AB:91
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C700D02F013D07BD849CF41E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8d539d0-e338-377c-9c79-b9b7e5e89a77.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:70:0d:02:f0:13:d0:7b:d8:49:cf:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=4b47e771-2341-4da3-8cdd-bf31a64425dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:21:15:49:3e:6d:9d:6b:3b:af:f4:ec:3f:
32:ca:a7:50:e5:0a:25:41:e8:22:b6:20:b0:92:1a:
6f:aa:a8:ea:c1:96:c8:8a:aa:5a:ba:4e:4b:2f:c3:
73:48:ee:0a:1a:47:fe:d3:23:f4:95:f4:de:00:13:
f1:a4:45:50:55:ac:9b:6a:f4:b1:af:bf:68:3a:5c:
da:a4:6f:ad:2b:1f:79:57:29:31:82:88:c6:a9:76:
64:80:bc:66:a2:70:1f:af:31:72:80:82:73:35:ff:
b9:54:d0:a8:4b:e7:4c:23:99:5c:c4:60:97:48:3d:
98:6c:55:3b:9f:23:a4:e5:c6:73:34:ef:7f:9e:20:
be:bb:42:c6:98:40:ad:a5:16:1e:8a:b5:c9:0f:93:
15:81:9c:3a:8f:84:67:55:89:62:d1:31:50:c0:21:
c7:09:62:50:9e:de:88:fe:ce:e1:a9:4a:3d:41:ba:
88:d5:55:85:99:d8:2a:3b:41:f8:28:3c:94:ab:8a:
19:fa:ea:22:73:f1:2d:23:f1:62:63:b9:4a:9b:79:
56:2b:88:ea:d7:77:b0:d1:20:60:2c:16:45:95:18:
81:62:a2:c2:34:dd:db:b4:1a:4f:ec:30:07:33:bc:
c4:7a:e9:5d:2c:19:2e:d4:0b:b9:dd:5c:54:4a:e7:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F5:2C:53:14:B2:6C:CA:1D:8F:A1:2A:E8:75:E7:63:70:48:AB:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8d539d0-e338-377c-9c79-b9b7e5e89a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:29:72:15:57:ea:8d:b4:5e:f4:b6:4c:d1:22:70:ad:05:d0:
f5:2d:db:40:98:d9:32:95:9c:d0:fe:af:aa:56:b9:89:31:cf:
84:92:ee:c5:17:e3:b7:ff:7b:1e:cb:c9:8c:ad:61:ff:48:ed:
02:53:86:7a:fc:02:6c:58:f3:c0:a7:c1:2f:4b:b2:07:aa:91:
1a:78:01:a4:43:36:cd:5b:20:b5:d1:45:0f:93:70:ed:f2:0e:
00:e0:6e:19:ef:1d:a8:77:de:63:57:88:59:5e:93:ae:ec:fb:
47:fc:ee:f3:14:bb:db:cd:75:ab:12:d6:36:db:a2:45:5d:5a:
7e:84:92:18:40:b3:66:49:59:4a:51:bb:a1:b4:ad:6e:56:85:
32:05:5c:04:ac:0a:a7:a0:49:04:83:d0:70:69:2a:c6:27:63:
f0:bb:c7:fc:dc:d8:29:54:df:b3:07:86:01:f5:99:e8:69:8b:
62:66:b6:10:13:ab:b1:77:e4:2f:f2:a4:2e:b0:1f:41:30:32:
bd:ee:f9:bd:16:8c:be:25:27:be:db:bf:e0:82:99:31:e6:2d:
16:8b:9a:3f:f4:7e:5a:52:5b:c5:a0:d9:0d:eb:b1:3a:db:05:
3f:44:5a:bc:05:90:e8:4e:32:d1:59:5e:53:9f:3d:77:64:31:
41:4e:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:38 2025 by rpki-client