Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5a21ac8-b375-35f4-b496-5dafa35b6b83.roa
File: d5a21ac8-b375-35f4-b496-5dafa35b6b83.roa (raw, json)
Hash identifier: zA4wSLCdC0SUIJD3wQWHjBN0rHrEzbc5BwAtVK+x8VY=
Subject key identifier: CD:AE:BA:B3:CA:C3:C0:A2:42:E7:71:A3:AC:AD:AC:B4:75:9E:BB:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C8151929CBF9C67FBCE79C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5a21ac8-b375-35f4-b496-5dafa35b6b83.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:81:51:92:9c:bf:9c:67:fb:ce:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=687778ac-eaab-437d-b483-cdc2bf033d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:a9:cf:c8:1f:07:10:1a:17:2e:10:10:f9:
4f:b4:5f:9a:7d:c3:8e:4a:53:47:27:83:98:ee:e0:
b4:d6:93:cc:0e:fe:c5:a7:ae:fa:08:6e:20:98:b1:
20:e8:a5:8d:30:a4:96:6e:d6:99:ff:e9:59:6a:de:
ab:0c:d6:ee:99:00:61:56:34:57:8e:f8:76:43:f9:
81:81:25:0a:9f:33:01:23:fc:6f:7d:1d:e8:ea:5a:
85:1a:e8:7a:a2:08:23:76:94:44:d9:ed:ad:32:53:
f9:71:fc:e8:ac:da:76:87:a2:82:03:88:04:74:3d:
78:a7:a9:4d:d2:2a:48:b5:3d:55:db:32:77:cc:05:
92:21:26:da:56:3c:6c:2b:b9:76:c7:60:6a:ce:e2:
c8:bb:84:e6:2d:26:36:4f:1e:88:24:1f:ce:ef:41:
67:0b:0b:01:bd:44:21:d5:8d:c4:76:d0:6e:b5:58:
2a:43:a2:6f:3c:15:9d:01:31:ca:e2:ac:82:f2:d0:
77:22:4a:81:53:f2:44:6e:fb:1d:f4:c8:cb:e7:b7:
24:3b:96:6c:fa:a4:05:af:83:97:bb:e6:4f:8f:db:
0e:1f:05:fb:61:fb:83:5f:ef:7e:f3:5d:da:1e:38:
3c:a1:ac:12:a1:7f:7e:e3:e4:c4:d6:fd:ce:da:fa:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AE:BA:B3:CA:C3:C0:A2:42:E7:71:A3:AC:AD:AC:B4:75:9E:BB:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5a21ac8-b375-35f4-b496-5dafa35b6b83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:86:75:d6:a2:2d:c0:85:34:db:86:90:15:e3:23:5d:42:00:
2d:12:3f:df:8e:ce:9c:73:6b:de:e2:39:dd:5b:a9:f2:02:28:
8a:ab:d3:db:86:a0:60:10:2e:bb:41:01:98:75:d7:5e:60:22:
46:e8:ef:b0:4d:70:75:a4:ff:c2:9f:d0:b0:41:b0:5b:ce:53:
c2:69:53:6a:e9:1e:8e:3d:c6:a2:38:88:97:a7:04:f8:95:9c:
91:e3:08:3e:d9:c4:c0:ce:09:c8:84:3c:61:9f:50:d2:bd:1f:
68:fb:81:07:b0:41:87:a2:71:02:cd:cf:2b:0c:18:6b:f8:1c:
02:c0:42:0e:c5:e9:7e:b8:e4:80:8d:27:ed:7a:9f:25:16:1f:
d9:bc:5e:0c:f9:73:ab:22:ea:9d:3c:45:6c:21:76:8f:d3:0b:
9a:f3:8e:99:05:51:cc:8f:d5:80:7d:b6:2d:52:e2:3b:8c:cd:
c2:2a:68:83:c2:1a:a0:e4:a2:26:cd:7a:2a:d3:17:2d:81:88:
d2:57:73:c0:55:3a:e3:f5:31:1f:e0:94:a9:dd:ad:0f:8c:69:
44:28:a5:0a:9a:3a:11:d1:0d:47:08:2e:36:8a:cb:30:1c:bd:
1f:c5:84:b8:58:bc:66:04:44:8e:8c:6a:87:09:63:6e:fd:f3:
58:7a:65:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:30 2025 by rpki-client