Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb9d0ee8-4813-3451-9598-6a1dfcdb033f.roa
File: cb9d0ee8-4813-3451-9598-6a1dfcdb033f.roa (raw, json)
Hash identifier: 8Ctdn0xSS9mPcHa2qveFGZCtJDu0nvuBHLVHaq5/gGw=
Subject key identifier: 20:CF:C3:81:DB:00:4A:BE:1F:FF:6A:22:1A:07:57:BB:9A:1D:12:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE474C9DC4CD6C74FD37CB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb9d0ee8-4813-3451-9598-6a1dfcdb033f.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:47:4c:9d:c4:cd:6c:74:fd:37:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=3ec1e8ef-3bbb-47ea-b727-f39b68c27e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:82:64:c7:f1:10:4a:4b:93:99:a3:23:bd:
9d:a8:79:a6:0d:ec:c4:fa:c8:4c:3a:e4:55:45:61:
4a:9a:27:b6:69:7d:79:63:a2:bc:e3:03:b9:ec:58:
04:b4:ef:da:3c:75:ed:64:6a:1e:f3:97:a2:a7:1e:
e9:77:ff:93:62:55:b5:36:f0:b1:d2:41:c2:cf:e6:
36:90:95:3a:b8:e5:90:14:81:43:ca:9e:c8:53:15:
5c:51:73:c5:ad:97:29:d8:3b:56:1f:5d:ee:3f:73:
7c:60:de:99:f6:c0:e1:7a:89:97:bd:9e:67:d2:0c:
9a:9d:6e:4f:70:c7:f7:6e:7a:fc:df:5a:e2:f6:0a:
96:31:13:cf:0f:19:56:de:1a:7f:c8:d2:63:1d:91:
da:b2:37:47:ff:9f:1f:b2:c4:fb:30:94:49:09:1d:
09:1d:2e:6c:f4:7e:16:cd:2f:cf:51:a8:f3:0f:89:
f6:8d:93:7d:d9:7d:81:50:a2:78:f5:38:1b:57:08:
1d:62:ca:78:7b:75:6f:a6:95:ff:a3:ec:aa:b3:57:
e4:43:04:99:4c:56:b1:f4:fd:e3:f2:06:f1:e0:ab:
07:04:16:1e:7d:e1:64:0f:25:4b:49:1b:b0:10:eb:
ec:d7:e5:99:bc:78:cc:3e:03:9c:37:cb:ea:c1:51:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CF:C3:81:DB:00:4A:BE:1F:FF:6A:22:1A:07:57:BB:9A:1D:12:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb9d0ee8-4813-3451-9598-6a1dfcdb033f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:05:65:98:4f:97:e6:36:4a:e4:d7:cc:ea:4f:bc:f2:3a:61:
7e:93:16:34:4c:8c:69:f3:d7:d4:fa:a9:4c:72:95:0d:40:84:
a6:e2:ab:c5:cb:f5:40:e5:3d:40:fc:1f:45:11:1c:97:ab:3e:
8a:94:8a:8d:70:b3:79:b9:be:92:fe:4e:05:60:10:c4:27:34:
cd:ea:19:77:e1:53:f0:54:f6:b0:48:be:cf:ef:fa:00:05:70:
ea:40:04:fb:ca:c1:a1:8a:b7:5b:84:69:4b:42:76:8e:97:a2:
90:72:58:18:4e:a5:a6:a2:c8:90:7a:06:a4:99:46:e6:4b:27:
44:50:82:39:f2:f8:33:ee:4a:aa:02:b7:7b:65:28:82:bf:07:
1a:b1:82:a9:24:14:39:a3:0b:7f:7a:b5:5b:a8:24:1e:d4:9d:
3e:8c:ca:44:68:75:61:13:ff:cd:c1:e8:c6:56:35:1f:1a:91:
0f:bd:c6:9e:ff:8e:08:d0:ab:9b:c1:51:e8:12:79:a2:da:93:
ca:5b:c2:e1:24:64:f9:9e:62:3a:02:dc:fd:91:2f:84:53:b0:
5a:10:31:35:ff:b5:39:c9:5d:30:8c:54:19:f3:6e:01:d9:32:
b7:04:f9:7f:58:25:f8:2a:14:b8:c4:0d:0a:6a:be:94:aa:fe:
ae:c2:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:38 2025 by rpki-client