Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c91a3861-223f-3316-9d63-a691b8630379.roa
File: c91a3861-223f-3316-9d63-a691b8630379.roa (raw, json)
Hash identifier: LaBWq/0ndRPL5xtWqorcRYh/dmLNrITPqWaww/G0f9I=
Subject key identifier: 9A:1A:D8:19:DB:5A:65:EF:65:D7:1F:3B:FA:31:F2:21:C6:BB:E9:44
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840469FEFAC965EFD852A8C8080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c91a3861-223f-3316-9d63-a691b8630379.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:9f:ef:ac:96:5e:fd:85:2a:8c:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=0cde37c2-86ae-442d-98bf-5b6714579f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:44:fa:76:cf:68:39:95:ee:60:da:91:04:
15:df:5b:f9:20:49:75:d0:d5:59:12:e5:e6:1d:ef:
01:4a:9e:1c:e8:d7:0a:6d:18:08:f6:b4:4d:d5:9b:
a2:dd:ac:60:6b:47:e0:29:c2:18:c9:45:cd:6c:73:
46:c5:50:4b:72:be:e4:ce:22:ed:df:7b:e5:47:9f:
f8:c4:78:db:39:66:c9:4b:7d:05:28:8b:d7:3b:46:
17:cf:ef:19:ac:14:2a:dc:55:79:39:3e:2b:a3:cb:
ce:df:c2:b5:96:5d:ea:bb:77:de:66:d0:59:30:d8:
cb:e5:c8:e0:fc:42:3d:31:87:f2:02:f4:82:3a:c1:
7c:16:40:01:34:eb:ee:8d:e3:d0:29:24:be:95:ef:
44:d3:8e:de:6f:cc:28:23:eb:1f:a2:91:85:0f:6e:
48:d2:1a:cb:9e:95:6d:75:f7:ee:0e:a0:0b:a9:8d:
be:d9:f4:86:b6:d3:17:62:6d:6e:6b:11:b3:cc:dc:
15:35:99:bd:07:4c:26:a3:fe:6e:d6:ee:20:74:ce:
78:22:02:3b:e3:0d:23:f7:c3:46:21:c6:0e:62:93:
a5:a7:69:41:38:07:45:59:50:4d:95:12:ce:c1:c9:
86:0f:ec:f1:92:a1:69:4b:ee:40:80:17:59:23:a9:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1A:D8:19:DB:5A:65:EF:65:D7:1F:3B:FA:31:F2:21:C6:BB:E9:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c91a3861-223f-3316-9d63-a691b8630379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ef:9a:72:a7:d0:d8:8b:11:37:2a:c5:ae:17:71:f3:a1:10:
3a:28:56:24:a2:ab:42:a7:4d:4d:57:15:2e:78:47:5f:e0:b9:
1c:6f:91:39:d3:8b:fc:e2:fa:e0:1a:7c:4e:d1:19:86:c1:26:
4e:2d:17:59:4a:7a:43:e6:c2:44:43:fc:7f:27:7f:27:8e:d5:
04:6e:1c:94:74:b7:8b:5e:40:37:a3:1b:96:e0:d8:6b:f0:a1:
0d:4b:b9:eb:f6:3b:b1:6c:86:94:46:dd:be:f7:95:99:eb:86:
ba:1d:a8:f0:b7:41:4b:b2:1f:09:92:4e:6f:83:ce:4a:a5:da:
3e:28:55:9d:c0:b5:6e:de:78:ee:28:df:08:55:8a:8e:a2:9c:
5f:65:b0:86:cc:ea:1d:77:e1:f0:df:44:db:78:ba:8c:86:e1:
1c:39:91:98:5f:94:74:79:8f:fa:4b:3c:54:fb:cf:22:cb:a6:
48:ae:85:4e:ad:58:35:fb:01:65:29:27:4a:f8:a7:af:e7:22:
75:5e:f4:76:eb:44:7e:cc:89:21:36:d5:61:15:ee:45:bb:72:
7b:c8:d5:1c:52:3b:81:f5:7d:05:5d:55:81:b2:13:5b:42:cf:
50:60:19:73:e1:b6:d9:a2:82:93:cf:f6:34:58:97:8e:dd:03:
0f:96:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:15 2025 by rpki-client