Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b297e70e-aa6d-3cf0-b655-1dbd08ba6832.roa
File: b297e70e-aa6d-3cf0-b655-1dbd08ba6832.roa (raw, json)
Hash identifier: A1BKe2XkdQWeptRIDuOKW7zuA4YspI098/qFez+R57w=
Subject key identifier: AA:23:7B:55:56:F8:F2:E5:8A:3D:71:65:DC:9A:BE:EC:60:52:BD:25
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE474648DF96BCEF7069E9C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b297e70e-aa6d-3cf0-b655-1dbd08ba6832.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:47:46:48:df:96:bc:ef:70:69:e9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=a4e5b8bf-0427-43c9-a2da-790612bb1bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:7b:9e:14:2d:b8:b8:14:f9:dc:91:12:2b:
10:fc:23:c6:01:95:5b:04:69:cf:02:59:d7:f4:ae:
25:21:03:6f:99:a5:dc:05:37:10:88:c3:29:21:af:
43:42:56:b3:82:cb:62:82:ee:cf:2b:44:8e:61:27:
97:5e:66:3f:42:94:0b:8e:95:d6:4c:7a:b7:fc:b2:
a9:c5:97:fb:8a:5f:ba:75:fe:3d:39:c4:e3:a8:84:
f2:da:81:50:62:32:5e:dd:f0:4c:aa:29:88:95:3d:
f8:05:70:22:d2:f4:fc:fc:d1:ae:9d:52:5f:c3:fc:
39:9c:dc:3b:6d:7f:9b:92:93:17:41:e8:f8:35:72:
8d:b7:37:7b:e6:4e:28:05:b6:9f:3f:23:c7:10:93:
06:79:74:48:24:ff:58:b8:7e:c7:92:c2:68:10:59:
7f:5f:3a:5d:89:ab:54:7d:75:36:56:99:f5:5c:a6:
6a:ff:c3:99:a2:31:ac:02:c9:57:c5:ce:18:0b:82:
2a:89:d3:2c:d9:58:a6:5e:0a:a9:45:bf:fc:f9:30:
98:28:dc:92:09:47:44:07:52:8d:b5:13:85:63:e9:
a5:81:0e:ba:bb:0d:05:7f:8a:a8:12:03:2a:e8:9f:
71:d4:f5:94:38:50:bd:86:50:19:15:3f:75:3d:21:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:23:7B:55:56:F8:F2:E5:8A:3D:71:65:DC:9A:BE:EC:60:52:BD:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b297e70e-aa6d-3cf0-b655-1dbd08ba6832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:6c:75:5a:ae:c6:79:78:8b:83:41:5d:6e:64:6e:b7:e0:99:
17:56:0c:5e:44:bf:2e:f7:98:da:6a:ac:b4:05:87:9c:d8:9d:
a8:40:36:0a:d5:7d:8e:cf:9c:a0:c7:ef:d3:1b:41:3b:6e:a7:
62:c8:dc:16:52:51:2d:ee:c1:d4:40:5d:20:d5:33:30:5c:18:
3f:1c:d0:a9:5e:be:f8:cc:85:26:5f:63:92:9d:a1:fc:68:ae:
5d:6a:cf:95:de:71:52:34:d1:30:9c:f2:9b:3e:d8:ad:a0:7b:
d3:32:c5:cb:1a:4a:c1:e0:fe:9c:97:5c:b7:0a:b7:a3:f3:4a:
af:f5:5a:5a:3b:6e:48:23:ce:cf:50:3c:5e:9b:9a:f2:a2:9b:
53:f1:01:67:2d:92:29:29:66:7b:bf:1f:76:ca:f7:94:59:8c:
b1:91:20:94:fa:5d:c1:73:6b:5a:b2:91:b3:42:f5:ba:3a:25:
34:be:93:89:b6:4c:d4:2e:46:03:b4:c4:1d:b7:33:28:3f:34:
a1:63:86:93:b0:b9:8a:0e:27:0a:e6:a7:7f:68:f1:cb:64:85:
35:22:06:8a:ba:f3:c6:5c:c3:01:f7:6e:a6:c3:80:a0:b7:03:
87:00:5e:c7:d9:d1:52:65:05:c8:96:5d:7b:aa:09:af:10:fd:
b7:2c:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:00 2025 by rpki-client