Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3c32314-9675-32d0-b67a-450d572f1f5a.roa
File: d3c32314-9675-32d0-b67a-450d572f1f5a.roa (raw, json)
Hash identifier: TQA4Q4cpNCJDmkkWI9uKYIdPWi3kqFjlcC9v85Du3sY=
Subject key identifier: C9:A6:D1:80:EA:0E:E5:81:31:E7:51:01:7E:B5:54:A6:3B:01:3A:B3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF73682B091A3E34D40E29640
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3c32314-9675-32d0-b67a-450d572f1f5a.roa
Signing time: Thu 19 May 2022 12:00:00 +0000
ROA not before: Thu 19 May 2022 12:00:00 +0000
ROA not after: Fri 24 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f7:36:82:b0:91:a3:e3:4d:40:e2:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 19 12:00:00 2022 GMT
Not After : Jun 24 04:00:00 2022 GMT
Subject: CN=4ac375c5-6560-49ba-82dc-afdd653a396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:82:d3:51:f9:68:8e:89:07:65:c2:82:0b:
1c:26:e7:68:48:9c:92:5d:fb:b0:0e:7b:21:f6:ae:
38:41:47:c8:13:42:34:53:69:ab:c1:83:93:d9:2a:
fd:47:5a:a9:e0:9b:75:07:7b:51:f5:54:69:58:ed:
5c:ea:ec:e8:db:6f:3b:58:66:42:52:ff:35:7d:f7:
99:87:d7:69:d3:9c:d9:76:10:94:76:2b:44:d0:fa:
7b:5b:e9:3a:2b:d5:ce:ab:c6:7b:2e:dc:56:69:93:
b2:92:cf:03:bf:a6:04:b2:c1:f3:20:26:f1:9e:26:
fb:87:3e:66:37:5e:1b:81:1f:d6:72:81:8f:32:f9:
c3:bb:19:63:38:38:60:1c:48:94:73:a3:16:ec:67:
3c:08:9c:29:4d:b6:93:51:06:0a:5e:df:93:c3:27:
61:47:59:af:f3:a4:01:e1:62:32:e3:ff:e6:5f:a6:
f9:47:59:0f:fa:96:1f:16:07:45:67:2b:ca:26:73:
98:e5:93:23:e4:d1:8a:0e:3e:81:18:ac:c3:91:3d:
bc:1c:ac:34:a5:b7:71:eb:55:1a:1b:7a:44:18:ca:
b3:fd:0e:6d:64:3b:ad:d4:f9:d4:3e:a4:39:dd:74:
2d:0b:5f:dd:05:db:af:88:4b:b8:c7:63:06:9b:79:
c7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:D1:80:EA:0E:E5:81:31:E7:51:01:7E:B5:54:A6:3B:01:3A:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d3c32314-9675-32d0-b67a-450d572f1f5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:5a:d8:e5:ca:b3:c7:00:c3:3a:a7:7a:25:a4:ab:83:f4:6a:
34:34:de:db:6f:69:bd:85:d7:05:13:5e:a5:ca:45:25:ca:07:
d9:fa:b9:54:6a:7f:5d:1f:3b:d9:50:d9:74:0f:b7:5f:c7:54:
c8:43:10:ff:ad:67:bb:14:91:9d:20:a6:de:5b:35:1f:15:85:
ad:53:63:6f:8c:d2:32:61:03:8f:db:7d:85:f7:37:a1:33:29:
fa:8d:51:7d:5e:83:30:57:4e:1f:32:d1:fc:3f:0a:03:cd:8e:
5c:bb:77:38:df:bb:18:04:9e:5f:40:f8:13:d9:fe:fe:14:55:
4f:96:05:13:e5:28:85:a0:4f:92:4a:3e:6f:59:8d:ce:93:71:
e2:ed:cd:e6:67:a8:a1:4a:f5:b2:e6:50:01:73:b6:60:a7:a0:
e8:eb:1d:16:99:61:aa:8e:29:77:df:cc:1e:c1:ab:b1:b3:e1:
a2:d4:03:2d:7d:df:bf:dc:68:94:be:9f:9f:b9:eb:64:9c:d3:
94:c0:c3:35:76:74:54:05:ee:bd:ca:e3:35:83:13:06:89:ab:
1a:a6:bd:d8:85:06:72:cf:17:b5:aa:84:4b:1b:12:53:d5:b4:
c2:34:b4:49:95:68:27:8c:9b:96:bf:b6:ad:ad:ce:06:5c:d7:
b1:06:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:01 2025 by rpki-client