Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9fb5498-0455-300c-9c41-5741f8b6f1d8.roa
File: d9fb5498-0455-300c-9c41-5741f8b6f1d8.roa (raw, json)
Hash identifier: wapQzJprER0f1JmdBB4oEr3X2m4pwczYK0CaNN48OCw=
Subject key identifier: 48:49:23:6F:1D:4A:1F:A7:26:85:38:1C:4A:13:E2:03:48:35:A6:FA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81D83C04D8934FC16020C580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9fb5498-0455-300c-9c41-5741f8b6f1d8.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:d8:3c:04:d8:93:4f:c1:60:20:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=fb7d1cf8-05b5-4807-9513-09c5d474d0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:bc:97:b9:e7:e9:84:a0:8b:b3:9e:de:47:
f9:9c:08:a8:26:8f:f9:bc:98:4e:ea:68:9d:34:18:
c6:6e:7a:6d:4e:7a:d4:a7:f4:96:7c:6a:2e:87:3a:
fa:d8:cd:1f:6b:94:10:1c:4d:71:95:ff:4a:f5:e9:
fb:2e:64:73:ef:e7:26:ce:b9:ab:2a:21:64:5e:bb:
4a:de:e7:18:99:08:43:e9:a2:d9:b5:06:92:36:2f:
54:50:23:07:3c:f2:d9:2a:73:56:f3:99:1e:ff:76:
11:fb:9f:56:21:1a:41:bd:5e:4a:fa:7f:ff:1d:f0:
31:da:14:94:b8:77:92:f0:fd:27:fe:2c:67:6f:aa:
bb:ee:6a:9c:87:08:2f:9a:f2:82:26:54:3d:ce:db:
64:af:b5:8f:e3:13:70:94:ac:ea:36:b5:c8:b5:09:
25:95:14:5f:be:a1:b3:f0:ab:bf:14:68:c1:fc:95:
0e:55:a0:4f:ae:f8:68:85:6c:6a:04:dd:ed:b6:a2:
8f:29:fc:8d:88:3c:a8:08:f2:fc:01:5c:0f:e0:74:
1b:1d:52:28:62:42:26:d5:32:e3:f1:ed:a8:0d:3f:
df:1a:0a:dc:f0:e1:24:ba:42:c5:95:f5:ba:d1:65:
d5:10:aa:0c:1d:db:03:25:1a:1f:6c:f5:91:69:87:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:23:6F:1D:4A:1F:A7:26:85:38:1C:4A:13:E2:03:48:35:A6:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9fb5498-0455-300c-9c41-5741f8b6f1d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c1:05:a5:3f:06:b3:a9:cd:76:11:e8:54:34:28:54:ec:0b:
21:26:f6:29:f8:87:c1:8c:81:5c:7f:f7:0c:04:21:72:90:20:
9f:74:0b:85:a1:b3:d1:17:d3:a8:c8:c0:7d:75:6d:69:90:82:
96:a3:e7:21:ba:33:26:d8:c2:16:ae:c6:f4:7f:17:3e:b6:b5:
63:52:0b:3a:cd:c9:40:08:44:b5:5f:ee:e3:c2:16:3a:2e:54:
04:ef:07:67:a9:d5:a3:29:4e:13:fd:3a:3e:19:e7:c5:fb:f5:
49:54:78:88:03:da:0d:23:6c:1c:9e:5c:21:1b:5b:6c:76:cc:
22:57:25:e5:97:1b:f6:3e:80:fd:36:72:a4:f7:d6:d4:4f:05:
cf:b4:42:a2:2d:2e:e6:bc:d1:29:e5:0a:da:b0:c9:95:03:9e:
79:3b:91:cd:cd:f4:23:1d:f9:f3:db:d3:cf:49:15:3c:a0:59:
bc:60:4c:99:c0:fe:c1:b5:41:d7:fa:fc:cd:9b:53:c0:a9:87:
1b:30:15:bf:05:7a:a5:06:ee:bc:5a:80:a4:b8:ae:17:fb:f7:
a7:1e:47:32:d8:a3:15:88:46:ea:2a:46:7d:6f:57:c7:0d:22:
07:e0:15:5c:dc:05:09:80:f6:d1:14:5e:16:f9:5a:e6:ce:59:
74:04:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:36 2025 by rpki-client