Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2cf47f5-223c-394d-be15-0dd840095f96.roa
File: f2cf47f5-223c-394d-be15-0dd840095f96.roa (raw, json)
Hash identifier: slKkuIn+jpMVZlYeGLNqKrD9zsHv/xfIYolW3+6byCU=
Subject key identifier: 08:D9:AB:E9:66:F9:00:8B:12:03:41:DC:1C:EF:A3:B4:D3:1F:EB:B3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5ABB2B7FF723A698CFB49A26
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2cf47f5-223c-394d-be15-0dd840095f96.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 107.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:bb:2b:7f:f7:23:a6:98:cf:b4:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=07db2495-f001-4543-b7e3-667c4ef80ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:71:1f:3d:c3:60:ef:bb:a9:26:5d:f1:43:
0b:dc:ac:c3:f3:3e:7c:27:1b:96:7c:de:a3:7d:6f:
b5:e9:23:13:cc:99:1e:c9:e1:d3:12:ca:1f:57:9a:
5c:a3:4a:3a:73:de:b3:d0:c4:6e:9d:1c:60:f8:b3:
62:4f:f7:c0:b1:f6:92:25:9e:0b:a2:18:28:21:b3:
c1:c9:3d:52:18:d7:8d:21:8c:87:f3:ce:93:3d:68:
68:44:3c:58:62:61:9c:48:13:46:6b:94:07:f4:d8:
e8:61:f1:2d:83:51:46:10:73:f2:e0:f7:18:eb:2c:
fe:ca:ca:5a:28:78:f4:42:71:c4:b1:27:1f:ba:fd:
e0:15:06:7b:15:87:bc:67:38:74:19:a0:74:c9:1b:
52:c4:48:de:c7:fd:7b:22:96:fb:d0:07:b7:77:04:
03:61:d0:84:aa:91:e4:2f:e3:ab:2e:6b:1e:c8:19:
e4:cf:d4:c3:7e:0c:08:b7:d3:de:00:ff:57:a6:59:
54:51:09:36:8f:70:70:d6:57:9e:ac:02:3e:77:55:
e4:91:29:23:11:1c:ed:63:e8:34:17:1c:be:53:a5:
35:86:dc:9d:4d:97:51:1b:81:11:44:dd:7c:9d:76:
6f:c7:6d:31:b9:f0:fc:89:7e:60:7a:3c:87:c1:93:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D9:AB:E9:66:F9:00:8B:12:03:41:DC:1C:EF:A3:B4:D3:1F:EB:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2cf47f5-223c-394d-be15-0dd840095f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:9f:56:ac:bf:c4:ca:79:e9:ec:c5:35:01:52:bd:e0:d0:99:
e1:67:ea:b3:c6:17:fe:36:db:a5:37:8e:0c:2c:01:d4:ac:b2:
cd:c1:09:52:aa:ee:85:2c:35:22:cf:16:6c:82:a8:09:dc:b7:
da:78:82:37:6e:2b:c7:2d:02:04:57:e9:bc:f1:7e:7e:00:ad:
6c:f2:11:d7:69:17:14:4a:d3:dc:04:06:95:fb:96:f2:30:1a:
27:84:e8:74:d0:9a:da:6a:8e:94:36:2b:59:4f:40:0f:15:51:
70:1c:8b:58:48:19:6a:f3:d5:07:93:f2:62:88:4c:14:d5:7b:
39:8a:74:8e:62:ec:ec:d8:ca:3c:39:fb:d2:c2:24:92:b3:24:
9f:b1:fd:d3:03:25:3e:f8:ee:58:26:83:1c:1d:d1:8e:bb:b3:
f5:4a:8e:26:9c:da:f2:01:d5:fc:b3:b7:3b:93:cf:4a:08:d7:
5d:42:df:97:01:a8:35:39:6f:29:08:f5:7f:de:0a:75:d9:06:
f6:46:9c:8f:90:f3:bc:bb:2a:e9:fb:ed:fa:b1:8b:4c:af:d3:
82:17:80:02:4b:18:c5:cb:a9:54:0c:05:53:33:2f:c4:f0:5f:
71:6b:0a:97:4e:fa:d9:02:2b:ed:b0:7f:86:f9:5e:4b:a7:d7:
b7:de:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:40:21 2025 by rpki-client